[jboss-jira] [JBoss JIRA] (SECURITY-696) MessageFactory: Fallback to load classes from current class classloader if tccl failed

Marek Posolda (JIRA) jira-events at lists.jboss.org
Mon Sep 17 09:39:36 EDT 2012


     [ https://issues.jboss.org/browse/SECURITY-696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marek Posolda resolved SECURITY-696.
------------------------------------

         Assignee: Marek Posolda  (was: Darran Lofthouse)
    Fix Version/s: Negotiation_2_2_2
       Resolution: Done

    
> MessageFactory: Fallback to load classes from current class classloader if tccl failed
> --------------------------------------------------------------------------------------
>
>                 Key: SECURITY-696
>                 URL: https://issues.jboss.org/browse/SECURITY-696
>             Project: PicketBox (JBoss Security and Identity Management)
>          Issue Type: Enhancement
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>    Affects Versions: Negotiation_2_2_1
>         Environment: negotiation 2.2.1.Final, JBoss AS 7.1.2, GateIn portal
>            Reporter: Marek Posolda
>            Assignee: Marek Posolda
>            Priority: Minor
>             Fix For: Negotiation_2_2_2
>
>         Attachments: SECURITY-696.patch
>
>
> Currently method MessageFactory.loadClass(String classname) has possibility to load classes only from Thread context classloader (Thread.currentThread().getContextClassLoader()).
> It could be nice if there is possibility to load classes from different classloader if TCCL failed. The best would be likely classloader of current class MessageFactory (MessageFactory.class.getClassLoader()) because libraries jboss-negotiation-common and jboss-negotiation-spnego are almost always loaded by same classloader (In JBoss AS7, they are part of same module).
> This enhancement could be helpful for example in GateIn portal integration, as we have custom NegotiationAuthenticator in different module and so we don't need to explicitly mention additional module "org.jboss.security.negotiation" in dependencies of gatein.ear/META-INF/MANIFEST.MF

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list