Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Users can override classes of the jakarta package. #23940

Closed
kosakak opened this issue May 20, 2022 · 0 comments · Fixed by #23941
Closed

Users can override classes of the jakarta package. #23940

kosakak opened this issue May 20, 2022 · 0 comments · Fixed by #23941

Comments

@kosakak
Copy link
Contributor

kosakak commented May 20, 2022

Environment Details

  • GlassFish Version (and build number):7.0.0-M4

Problem Description

GlassFish defines the following list as exceptions to classloader delegation, but this list does not have "jakarta", which allows users to override classes of the jakarta package.

https://github.com/eclipse-ee4j/glassfish/blob/7.0.0-M4/appserver/web/war-util/src/main/java/org/glassfish/web/loader/WebappClassLoader.java#L116-L126

kosakak added a commit to kosakak/glassfish that referenced this issue May 20, 2022
Signed-off-by: kosaka.koki <kosaka.koki@fujitsu.com>
dmatej added a commit that referenced this issue May 20, 2022
Fix #23940 Users can override classes of the jakarta package.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant