Skip to content
Permalink
Browse files

[JENKINS-49543] Old versions of Tomcat also failed to serialize class…

…es from Jenkins modules.

(cherry picked from commit 376c6a0)
  • Loading branch information...
jglick authored and olivergondza committed Feb 26, 2018
1 parent 2ce5036 commit dd3ddf3ceb6428dc0b3a15148d65e8baece0a42c
Showing with 4 additions and 0 deletions.
  1. +4 −0 core/src/main/java/jenkins/security/ClassFilterImpl.java
@@ -273,6 +273,10 @@ private boolean isLocationWhitelisted(String _loc) {
r = r.substring(0, r.length() - suffix.length());
}
}
if (r.startsWith("jar:file:/") && r.endsWith(".jar!/")) {
// JENKINS-49543: also an old behavior of Tomcat. Legal enough, but unexpected by isLocationWhitelisted.
r = r.substring(4, r.length() - 2);
}
return r;
}

0 comments on commit dd3ddf3

Please sign in to comment.
You can’t perform that action at this time.