[PR #895] [MERGED] Allow jar:nested: URIs in default security manager #792

Closed
opened 2025-12-30 01:26:49 +01:00 by adam · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/apple/pkl/pull/895
Author: @bioball
Created: 1/22/2025
Status: Merged
Merged: 1/22/2025
Merged by: @bioball

Base: mainHead: jar-nested-uris


📝 Commits (1)

  • bd149bf Allow jar:nested: URIs in default security manager

📊 Changes

1 file changed (+11 additions, -3 deletions)

View changed files

📝 pkl-core/src/main/java/org/pkl/core/SecurityManagers.java (+11 -3)

📄 Description

Nested jars built by spring boot can possibly represent classpath resource URIs as "jar:nested:".

This changes Pkl to by default trust them with the same level as modulepath URIs.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/apple/pkl/pull/895 **Author:** [@bioball](https://github.com/bioball) **Created:** 1/22/2025 **Status:** ✅ Merged **Merged:** 1/22/2025 **Merged by:** [@bioball](https://github.com/bioball) **Base:** `main` ← **Head:** `jar-nested-uris` --- ### 📝 Commits (1) - [`bd149bf`](https://github.com/apple/pkl/commit/bd149bfd1afeb8ff45f12dda9bf7aa9807c7a69b) Allow jar:nested: URIs in default security manager ### 📊 Changes **1 file changed** (+11 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `pkl-core/src/main/java/org/pkl/core/SecurityManagers.java` (+11 -3) </details> ### 📄 Description Nested jars built by spring boot can possibly represent classpath resource URIs as "jar:nested:". This changes Pkl to by default trust them with the same level as modulepath URIs. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2025-12-30 01:26:49 +01:00
adam closed this issue 2025-12-30 01:26:50 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pkl#792