Uploaded image for project: 'Velocity'
  1. Velocity
  2. VELOCITY-941

1.7.x backport for SecureUberspector should block methods on ClassLoader and subclasses

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: 1.7.x
    • Component/s: None
    • Labels:
      None

      Description

      This is a backport for https://github.com/apache/velocity-engine/tree/1.7.x branch from the patch merged into master via: https://issues.apache.org/jira/browse/VELOCITY-931

       

      PR available:

      https://github.com/apache/velocity-engine/pull/21

       

      The 1.7.x branch need also https://github.com/apache/velocity-engine/pull/22 to be able to compile, test and build via ant.

       

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                wglass William Glass-Husain
                Reporter:
                cesarhernandezgt Cesar Hernandez
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: