[jboss-jira] [JBoss JIRA] (WFCORE-891) jboss-deployment-structure.xml resource root allows references outside the deployment

[Jiri Ondrusek (Jira)]

     [ https://issues.jboss.org/browse/WFCORE-891?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jiri Ondrusek reassigned WFCORE-891:
------------------------------------

    Assignee: Jiri Ondrusek  (was: JBoss SET)


> jboss-deployment-structure.xml resource root allows references outside the deployment
> -------------------------------------------------------------------------------------
>
>                 Key: WFCORE-891
>                 URL: https://issues.jboss.org/browse/WFCORE-891
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Server
>            Reporter: Enrique González Martínez
>            Assignee: Jiri Ondrusek
>            Priority: Major
>
> The current code allows making references outside the deployment. This leads to misuse during deployment if users try to share the same library (outside the archive).
> See WFCORE-700
> Add a validation for resource-root. It must not allow references outside the deployment.
> https://github.com/wildfly/wildfly-core/blob/2.0.0.Beta2/server/src/main/java/org/jboss/as/server/deployment/module/descriptor/JBossDeploymentStructureParser13.java#L770



--
This message was sent by Atlassian Jira
(v7.12.1#712002)