I have committed a change to trunk to require a ProtectionDomain to be passed into the TransformerCommon.toClass calls and updated the callers. This gets past the problems of null CodeSources in the ProtectionDomain check. In general we should not be creating classes without a ProtectionDomain as it will not meaningful CodeSource location. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4021674#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...