RFR: 8338626: ClassLoaderExt::process_jar_manifest() should allow / separator on Windows [v4]

[Alan Bateman]

On Fri, 13 Sep 2024 17:06:49 GMT, Calvin Cheung <ccheung at openjdk.org> wrote:

>  It says the following: `Currently, the URLs must be relative to the code base of the JAR file for security reasons. Thus, remote optional packages will originate from the same code base as the application.`

That's right but there are a lot of issues here that date back to JDK 1.2 when the feature was added. We also have a long standing issue that tooling and plugins in the eco system are putting all manner of junk into the value, which has constrained us from fixing some of the fundamental issues.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20924#discussion_r1759985112