[jboss-jira] [JBoss JIRA] (WFCORE-891) jboss-deployment-structure.xml resource root allows references outside the deployment
Enrique González Martínez (JIRA)
issues at jboss.org
Fri Apr 6 05:09:00 EDT 2018
[ https://issues.jboss.org/browse/WFCORE-891?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Enrique González Martínez reassigned WFCORE-891:
------------------------------------------------
Assignee: JBoss SET (was: Enrique González Martínez)
> jboss-deployment-structure.xml resource root allows references outside the deployment
> -------------------------------------------------------------------------------------
>
> Key: WFCORE-891
> URL: https://issues.jboss.org/browse/WFCORE-891
> Project: WildFly Core
> Issue Type: Bug
> Components: Server
> Reporter: Enrique González Martínez
> Assignee: JBoss SET
>
> The current code allows making references outside the deployment. This leads to misuse during deployment if users try to share the same library (outside the archive).
> See WFCORE-700
> Add a validation for resource-root. It must not allow references outside the deployment.
> https://github.com/wildfly/wildfly-core/blob/2.0.0.Beta2/server/src/main/java/org/jboss/as/server/deployment/module/descriptor/JBossDeploymentStructureParser13.java#L770
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
More information about the jboss-jira
mailing list