-
Bug
-
Resolution: Done
-
Major
-
None
-
---
-
---
The Eclipse EE 10 version of the Websocket API is missing a doPrivileged block that the org.jboss.spec fork of the EE 8 API had, leading to this security manager failure:
java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.io.FilePermission" "/opt/buildAgent/work/8cce844551cd382d/ee-9/dist/target/wildfly-preview-27.0.0.Alpha2-SNAPSHOT/modules/system/layers/base/io/undertow/websocket/main/undertow-websockets-jsr-2.3.0.Alpha1.jar" "read")" in code source "(vfs:/content/websocket.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.websocket.war" from Service Module Loader") at org.wildfly.security.elytron-base//org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:309) at org.wildfly.security.elytron-base//org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:201) at java.base/java.lang.SecurityManager.checkRead(SecurityManager.java:661) at org.wildfly.security.elytron-base//org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:374) at java.base/java.util.zip.ZipFile.<init>(ZipFile.java:237) at java.base/java.util.zip.ZipFile.<init>(ZipFile.java:177) at java.base/java.util.jar.JarFile.<init>(JarFile.java:350) at java.base/sun.net.www.protocol.jar.URLJarFile.<init>(URLJarFile.java:103) at java.base/sun.net.www.protocol.jar.URLJarFile.getJarFile(URLJarFile.java:72) at java.base/sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:99) at java.base/sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:125) at java.base/sun.net.www.protocol.jar.JarURLConnection.getInputStream(JarURLConnection.java:155) at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.parse(ServiceLoader.java:1165) at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.nextProviderClass(ServiceLoader.java:1206) at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.hasNextService(ServiceLoader.java:1221) at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator$1.run(ServiceLoader.java:1268) at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator$1.run(ServiceLoader.java:1267) at java.base/java.security.AccessController.doPrivileged(Native Method) at java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.hasNext(ServiceLoader.java:1270) at java.base/java.util.ServiceLoader$2.hasNext(ServiceLoader.java:1300) at java.base/java.util.ServiceLoader$3.hasNext(ServiceLoader.java:1385) at jakarta.websocket.api@2.1.0//jakarta.websocket.ContainerProvider.getWebSocketContainer(ContainerProvider.java:49) at deployment.websocket.war//org.jboss.as.test.integration.ee.injection.support.websocket.WebSocketInjectionSupportTestCase.testWebSocketInjectionAndInterception(WebSocketInjectionSupportTestCase.java:82)
- is incorporated by
-
WFLY-16574 Upgrade Jakarta WebSocket to 2.1.0-jbossorg-2 in WildFly Preview
- Closed