Class-Path (in jar file) semantics different between Java 11 and 13 (on Windows)?

David Lloyd david.lloyd at redhat.com
Wed Nov 20 16:54:59 UTC 2019


On Wed, Nov 20, 2019 at 9:26 AM Scott Palmer <swpalmer at gmail.com> wrote:
>
> /C:/blah... is “root relative”. The (old) spec says the URL must be "relative to the code base".  What does "code base" mean when not referring to Applets or RMI?

"code base" is generally the URL of the class path entry itself.  It's
mainly defined in the specification for java.lang.ClassLoader.

> This seems like a bad idea (security hole) that worked by accident.

The specification is pretty clear, and doesn't seem unintentional.
Relative URLs have a very specific normative definition.  It's very
unambiguous; the code just doesn't work the way the specification says
it should.

-- 
- DML



More information about the core-libs-dev mailing list