Correct SecurityManager check for HTTP(S) module URIs (#1463)

This commit is contained in:
Jen Basch
2026-03-23 07:43:07 -07:00
committed by GitHub
parent a6db476c70
commit cce84d7ccc
2 changed files with 25 additions and 1 deletions

View File

@@ -519,6 +519,7 @@ public final class ModuleKeys {
@Override
public ResolvedModuleKey resolve(SecurityManager securityManager)
throws IOException, SecurityManagerException {
securityManager.checkResolveModule(uri);
var httpClient = VmContext.get(null).getHttpClient();
var request = HttpRequest.newBuilder(uri).build();
var response = httpClient.send(request, BodyHandlers.ofInputStream());