"flavia.rainone(a)jboss.com" wrote : | I think we should wait for Kabir to return from his vacation (next Monday) to see what he says about this. | It's not an AOP issue. AOP just uses VFS's in-memory mechanism. The issue is whether we should create some reproduceable url for in-memory stuff in InMemoryClassesDeployer. But I still don't see how this would help Anil's security issue, as it would still be a vfs url - which is THE topic of this discussion. There is no way to turn it into 'real' url, no matter what we do before. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4190892#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...