Skip to content

Commit

Permalink
[JENKINS-49543] Old versions of Tomcat also failed to serialize class…
Browse files Browse the repository at this point in the history
…es from Jenkins modules.
  • Loading branch information
jglick committed Feb 26, 2018
1 parent 501b117 commit 376c6a0
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions core/src/main/java/jenkins/security/ClassFilterImpl.java
Expand Up @@ -273,6 +273,10 @@ private boolean isLocationWhitelisted(String _loc) {
r = r.substring(0, r.length() - suffix.length());
}
}
if (r.startsWith("jar:file:/") && r.endsWith(".jar!/")) {
// JENKINS-49543: also an old behavior of Tomcat. Legal enough, but unexpected by isLocationWhitelisted.
r = r.substring(4, r.length() - 2);
}
return r;
}

Expand Down

0 comments on commit 376c6a0

Please sign in to comment.