spring-boot

Spring Boot

Tree: 4b40c9251e

Phillip Webb 08cc62a6b6 Simplify JarFileUrlKey to prevent issues with Cortex XDR agent Replace the string based `JarFileUrlKey` and cache with a simple key built directly from URL components. This should allow cache lookups to remain fast whilst removing any `URLStreamHandler.getHostAddress` calls. Prior to this commit, we assumed that it was safe to use the URL directly as a cache key as long as it had an empty or null `host`. This assumption isn't correct when Palo Alto Network Cortex XDR agent is present as it appears to intercept calls to `getHostAddress` and, unlike the JDK code, always perform a DNS lookup. Fixes gh-46401	9 months ago
..
java/org/springframework/boot/loader	Simplify JarFileUrlKey to prevent issues with Cortex XDR agent	9 months ago
resources	Improve loading of jar entry certificates	2 years ago

Phillip Webb 08cc62a6b6 Simplify JarFileUrlKey to prevent issues with Cortex XDR agent

Replace the string based `JarFileUrlKey` and cache with a simple key
built directly from URL components. This should allow cache lookups
to remain fast whilst removing any `URLStreamHandler.getHostAddress`
calls.

Prior to this commit, we assumed that it was safe to use the URL
directly as a cache key as long as it had an empty or null `host`.
This assumption isn't correct when Palo Alto Network Cortex XDR agent
is present as it appears to intercept calls to `getHostAddress`
and, unlike the JDK code, always perform a DNS lookup.

Fixes gh-46401

9 months ago

java/org/springframework/boot/loader

Simplify JarFileUrlKey to prevent issues with Cortex XDR agent

9 months ago

resources

Improve loading of jar entry certificates

2 years ago