JDK-8216401 : Allow "file:" URLs in Class-Path of local JARs
- Type: Bug
- Component: core-libs
- Affected Version: 7,8,11,13
- Priority: P3
- Status: Closed
- Resolution: Fixed
- Submitted: 2019-01-09
- Updated: 2020-02-18
- Resolved: 2019-01-14
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 11 | JDK 13 | JDK 7 | JDK 8 | Other |
|---|---|---|---|---|
| 11.0.5Fixed | 13 b04Fixed  |
7u241Fixed | 8u231Fixed |
openjdk8u242Fixed |
Related Reports
|
Relates :
|
|
|
Relates :
|
Description
The JAR spec for the Class-Path[1] attribute states that entries must be relative URLs (though this wasn't enforced for much of Java's history). It has come to light that there is software in the wild that is misusing the Class-Path, by including absolute "file:" URLs. In the interest of compatibility, this long-standing behavior should be maintained. We should allow "file:" entries in Class-Path for JARs loaded from the local disk. Note that this change will not affect behavior by default, because the "jdk.net.URLClassPath.disableClassPathURLCheck" system property to disable Class-Path enforcement code is on by default. 1. https://docs.oracle.com/en/java/javase/11/docs/specs/jar/jar.html#class-path-attribute
Comments
|