Previously, JarURLConnection didn't override getPermission(). This meant that it required all permissions. This was at odds with the Oracle JVM's concrete sun.net.www.protocol.jar.JarURLConnection which overrides getPermission to return a FilePermission with the read action for the path of the underlying jar. This commit updates our JarURLConnection to align its behaviour with sun.net.www.protocol.jar.JarURLConnection. Closes gh-5411 |
||
|---|---|---|
| .. | ||
| spring-boot-antlib | ||
| spring-boot-configuration-metadata | ||
| spring-boot-configuration-processor | ||
| spring-boot-gradle-plugin | ||
| spring-boot-loader | ||
| spring-boot-loader-tools | ||
| spring-boot-maven-plugin | ||
| pom.xml | ||