read lock is on the file not the path. You can remove and even
> replace
> >> the file while the read lock is still here.
> >> So my check succeeds, I give a jar:file URL then the file is replaced,
> the
> >> jar:file is open and get the new file (hacked one).
> >>
> &
le (hacked one).
>>
>
> Sounds like you want to implement a jvm filesystem and not a new url
> handler explained this way otherwise you still have this issue with other
> concurrent accesses.
>
I have not yet implemented it.
Concurrent accesses can be solved in multiple ways :
- open a
common configs.
>
> Yes but it is not secure even with read lock.
> The read lock is on the file not the path. You can remove and even replace
> the file while the read lock is still here.
> So my check succeeds, I give a jar:file URL then the file is replaced, the
> jar:file is open
u validate the resource before actually reasing it? Sounds
> saner and closer to security manager common configs.
Yes but it is not secure even with read lock.
The read lock is on the file not the path. You can remove and even replace the
file while the read lock is still here.
So my check suc
calls, not in the resource
itself. Can' t you validate the resource before actually reasing it? Sounds
saner and closer to security manager common configs.
> The easiest way to implements War Maven artifacts deployment is to use
> directly Maven resolver API and give file or jar:file URL
resources.
In a world using XML to create, configure and link instances (Spring), it is
terrible to let resources unchecked.
That's also why VestigeClassLoader#getResource is returning vrt: URL and not
jar:file: URL.
The easiest way to implements War Maven artifacts deployment is to use dir
Hi Gaël,
In Tomee we plugged before to enrich the classloader and then tomcat -and
other libs - works normally using jar urls.
Cant you use a listener to do that and convert m2 urls to plain jar files -
at the end it is local files i guess otherwise you generally consume too
much memory to be pro
Hello Tomcat developers,
I made a software to enable update of Java applications named Vestige.
To achieve that, Vestige use Maven, downloading Maven artifacts and creating
classloaders linked with jar inside m2 repository.
I made it to update my IBM notes connector (POP access provider).
The f
