[jira] [Closed] (VELOCITY-941) 1.7.x backport for SecureUberspector should block methods on ClassLoader and subclasses
"Michael Osipov (Jira)" <[email protected]>
| Newsgroups | gmane.comp.jakarta.velocity.devel |
|---|---|
| Message-ID | <[email protected]> |
[ https://issues.apache.org/jira/browse/VELOCITY-941?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Osipov closed VELOCITY-941.
-----------------------------------
Fix Version/s: (was: 1.7.x)
Assignee: (was: William Glass-Husain)
Resolution: Won't Fix
I am boldy saying that no one of us will touch 1.x ever again.
> 1.7.x backport for SecureUberspector should block methods on ClassLoader and subclasses
> ---------------------------------------------------------------------------------------
>
> Key: VELOCITY-941
> URL: https://issues.apache.org/jira/browse/VELOCITY-941
> Project: Velocity
> Issue Type: Improvement
> Reporter: Cesar Hernandez
> Priority: Major
>
> This is a backport for [https://github.com/apache/velocity-engine/tree/1.7.x] branch from the patch merged into master via: https://issues.apache.org/jira/browse/VELOCITY-931
>
> PR available:
> [https://github.com/apache/velocity-engine/pull/21]
>
> The 1.7.x branch need also [https://github.com/apache/velocity-engine/pull/22] to be able to compile, test and build via ant.
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)