[jboss-jira] [JBoss JIRA] (WFCORE-891) jboss-deployment-structure.xml resource root allows references outside the deployment

[Enrique González Martínez (JIRA)]

Enrique González Martínez created WFCORE-891:
------------------------------------------------

             Summary: jboss-deployment-structure.xml resource root allows references outside the deployment
                 Key: WFCORE-891
                 URL: https://issues.jboss.org/browse/WFCORE-891
             Project: WildFly Core
          Issue Type: Bug
          Components: Server
            Reporter: Enrique González Martínez
            Assignee: Enrique González Martínez


The current code allows making references outside the deployment. This leads to misuse during deployment if users try to share the same library (outside the archive).

See WFCORE-700

Add a validation for resource-root. It must not allow references outside the deployment.

https://github.com/wildfly/wildfly-core/blob/2.0.0.Beta2/server/src/main/java/org/jboss/as/server/deployment/module/descriptor/JBossDeploymentStructureParser13.java#L770



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)