[VELOCITY-941] 1.7.x backport for SecureUberspector should block methods on ClassLoader and subclasses

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Assignee: Unassigned
• Reporter: Cesar Hernandez
• Created: 23/Mar/21 03:42
• Updated: 03/Feb/24 20:28
• Resolved: 03/Feb/24 20:28

Description

This is a backport for https://github.com/apache/velocity-engine/tree/1.7.x branch from the patch merged into master via: https://issues.apache.org/jira/browse/VELOCITY-931

 

PR available:

https://github.com/apache/velocity-engine/pull/21

 

The 1.7.x branch need also https://github.com/apache/velocity-engine/pull/22 to be able to compile, test and build via ant.

 

 

Issue Links

• is a clone of: VELOCITY-931 SecureUberspector should block methods on ClassLoader and subclasses