spring-boot

Spring Boot

Tree: ed5ebfc1da

Phillip Webb 08cc62a6b6 Simplify JarFileUrlKey to prevent issues with Cortex XDR agent Replace the string based `JarFileUrlKey` and cache with a simple key built directly from URL components. This should allow cache lookups to remain fast whilst removing any `URLStreamHandler.getHostAddress` calls. Prior to this commit, we assumed that it was safe to use the URL directly as a cache key as long as it had an empty or null `host`. This assumption isn't correct when Palo Alto Network Cortex XDR agent is present as it appears to intercept calls to `getHostAddress` and, unlike the JDK code, always perform a DNS lookup. Fixes gh-46401	7 months ago
..
java/org/springframework/boot/loader	Simplify JarFileUrlKey to prevent issues with Cortex XDR agent	7 months ago
resources	…

Phillip Webb 08cc62a6b6 Simplify JarFileUrlKey to prevent issues with Cortex XDR agent

Replace the string based `JarFileUrlKey` and cache with a simple key
built directly from URL components. This should allow cache lookups
to remain fast whilst removing any `URLStreamHandler.getHostAddress`
calls.

Prior to this commit, we assumed that it was safe to use the URL
directly as a cache key as long as it had an empty or null `host`.
This assumption isn't correct when Palo Alto Network Cortex XDR agent
is present as it appears to intercept calls to `getHostAddress`
and, unlike the JDK code, always perform a DNS lookup.

Fixes gh-46401

7 months ago

java/org/springframework/boot/loader

Simplify JarFileUrlKey to prevent issues with Cortex XDR agent

7 months ago

resources

…