spring-boot/spring-boot-project/spring-boot-tools/spring-boot-loader
Phillip Webb c85918b8b3 Create new JarFile instance for URL connections
Update `JarURLConnection` to ensure that when connections are opened
a new copy of the JarFile is provided.

Prior to this commit, a single `JarFile` instance was shared which meant
that it could be accidental closed if accessed via
`JarURLConnection.getJarFile()`. If the underlying jar file is closed
then it's possible for a `NoClassDefFoundError` to be thrown if running
on JDK 11 with an active `SecurityManager`.

Closes gh-17796
2020-04-21 16:32:51 -07:00
..
src Create new JarFile instance for URL connections 2020-04-21 16:32:51 -07:00
pom.xml Correct SCM URLs in published poms 2019-10-02 10:48:30 +01:00