spring-boot/spring-boot-project/spring-boot-tools/spring-boot-loader/src
Phillip Webb c85918b8b3 Create new JarFile instance for URL connections
Update `JarURLConnection` to ensure that when connections are opened
a new copy of the JarFile is provided.

Prior to this commit, a single `JarFile` instance was shared which meant
that it could be accidental closed if accessed via
`JarURLConnection.getJarFile()`. If the underlying jar file is closed
then it's possible for a `NoClassDefFoundError` to be thrown if running
on JDK 11 with an active `SecurityManager`.

Closes gh-17796
2020-04-21 16:32:51 -07:00
..
it Merge '1.5.x' into 2.0.x 2019-07-24 11:39:58 +01:00
main/java/org/springframework/boot/loader Create new JarFile instance for URL connections 2020-04-21 16:32:51 -07:00
test Create new JarFile instance for URL connections 2020-04-21 16:32:51 -07:00