[jboss-jira] [JBoss JIRA] (WFCORE-891) jboss-deployment-structure.xml resource root allows references outside the deployment

Enrique González Martínez (JIRA) issues at jboss.org
Fri Apr 6 05:09:00 EDT 2018


     [ https://issues.jboss.org/browse/WFCORE-891?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Enrique González Martínez reassigned WFCORE-891:
------------------------------------------------

    Assignee: JBoss SET  (was: Enrique González Martínez)


> jboss-deployment-structure.xml resource root allows references outside the deployment
> -------------------------------------------------------------------------------------
>
>                 Key: WFCORE-891
>                 URL: https://issues.jboss.org/browse/WFCORE-891
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Server
>            Reporter: Enrique González Martínez
>            Assignee: JBoss SET
>
> The current code allows making references outside the deployment. This leads to misuse during deployment if users try to share the same library (outside the archive).
> See WFCORE-700
> Add a validation for resource-root. It must not allow references outside the deployment.
> https://github.com/wildfly/wildfly-core/blob/2.0.0.Beta2/server/src/main/java/org/jboss/as/server/deployment/module/descriptor/JBossDeploymentStructureParser13.java#L770



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)



More information about the jboss-jira mailing list