If you build the .war file from ( https://issues.jboss.org/browse/JBAS-8786 ) and add the jboss-scanning.xml as described here: http://community.jboss.org/message/594327, I still see this in the logs:
2011-03-20 10:52:02,738 TRACE [org.jboss.scanning.annotations.plugins.GenericAnnotationVisitor] (HDScanner)
Scanning class org.apache.commons.lang.time.FastDateFormat$NumberRule for annotations
2011-03-20 10:52:02,739 TRACE [org.jboss.classloading.spi.vfs.policy.VFSClassLoaderPolicy] (HDScanner)
getProtectionDomain:className=org.apache.commons.lang.time.DateUtils path=org/apache/commons/lang/time/DateUtils.class codeSourceURL=vfs:/Users/elias/jboss-6.0.0.Final/server/default/deploy/jarbomb.war/WEB-INF/lib/commons-lang-2.4.jar/
2011-03-20 10:52:02,739 TRACE [org.jboss.scanning.annotations.plugins.GenericAnnotationVisitor] (HDScanner)
Scanning class org.apache.commons.lang.time.DateUtils for annotations
2011-03-20 10:52:02,741 TRACE [org.jboss.classloading.spi.vfs.policy.VFSClassLoaderPolicy] (HDScanner)
getProtectionDomain:className=org.apache.commons.lang.time.FastDateFormat$TimeZoneNumberRule path=org/apache/commons/lang/time/FastDateFormat$TimeZoneNumberRule.class codeSourceURL=vfs:/Users/elias/jboss-6.0.0.Final/server/default/deploy/jarbomb.war/WEB-INF/lib/commons-lang-2.4.jar/
Etc.
The .war file contains:
eroero:jarbomb elias$ jar tf target/jarbomb.war | grep xml
META-INF/jboss-scanning.xml
WEB-INF/beans.xml
WEB-INF/faces-config.xml
WEB-INF/pretty-config.xml
WEB-INF/web.xml
META-INF/maven/de.chkal.jarbomb/jarbomb/pom.xml
And the jboss-scanning.xml looks like:
eroero:jarbomb elias$ cat ./src/main/webapp/META-INF/jboss-scanning.xml
<scanning xmlns="urn:jboss:scanning:1.0">
<!-- Purpose: Disable scanning for annotations in contained deployment. -->
</scanning>