Nested jars built by spring boot can possibly represent classpath resource URIs as "jar:nested:".
This changes Pkl to by default trust them with the same level as modulepath URIs.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/apple/pkl/pull/895
**Author:** [@bioball](https://github.com/bioball)
**Created:** 1/22/2025
**Status:** ✅ Merged
**Merged:** 1/22/2025
**Merged by:** [@bioball](https://github.com/bioball)
**Base:** `main` ← **Head:** `jar-nested-uris`
---
### 📝 Commits (1)
- [`bd149bf`](https://github.com/apple/pkl/commit/bd149bfd1afeb8ff45f12dda9bf7aa9807c7a69b) Allow jar:nested: URIs in default security manager
### 📊 Changes
**1 file changed** (+11 additions, -3 deletions)
<details>
<summary>View changed files</summary>
📝 `pkl-core/src/main/java/org/pkl/core/SecurityManagers.java` (+11 -3)
</details>
### 📄 Description
Nested jars built by spring boot can possibly represent classpath resource URIs as "jar:nested:".
This changes Pkl to by default trust them with the same level as modulepath URIs.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/apple/pkl/pull/895
Author: @bioball
Created: 1/22/2025
Status: ✅ Merged
Merged: 1/22/2025
Merged by: @bioball
Base:
main← Head:jar-nested-uris📝 Commits (1)
bd149bfAllow jar:nested: URIs in default security manager📊 Changes
1 file changed (+11 additions, -3 deletions)
View changed files
📝
pkl-core/src/main/java/org/pkl/core/SecurityManagers.java(+11 -3)📄 Description
Nested jars built by spring boot can possibly represent classpath resource URIs as "jar:nested:".
This changes Pkl to by default trust them with the same level as modulepath URIs.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.