Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-10640

WhitelistedClassesResourceGuard is not thread-safe

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Normal
    • Resolution: Fixed
    • 4.2.0, 5.0.0, 2.26.30, 3.2.7, 4.1.2
    • 5.0.0
    • None
    • None

    Description

      The WhitelistedClassesResourceGuard class is not thread-safe, yet a single instance of it is used by Wicket in (possibly) multiple concurrent threads.

      As a result, access to resources may occasionally be denied because the list of whitelisted prefixes is not properly initialized yet. One example we've seen is a failing call for the background image of the console application.

      Attachments

        Issue Links

          causes

          Improvement - An improvement or enhancement to an existing feature or task. CMS-10671 Use double checked locking pattern for lazy initialization of the WhitelistedClassesResourceGuard singleton

          • Normal - Normal priority, tasks to be done before next intermediate release
          • Closed
          is backported by

          Bug - A problem which impairs or prevents the functions of the product. CMS-10649 [BACKPORT 10.2] WhitelistedClassesResourceGuard is not thread-safe

          • Normal - Normal priority, tasks to be done before next intermediate release
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CMS-10650 [BACKPORT 7.9] WhitelistedClassesResourceGuard is not thread-safe

          • Normal - Normal priority, tasks to be done before next intermediate release
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CMS-10651 [BACKPORT 11.1] WhitelistedClassesResourceGuard is not thread-safe

          • Normal - Normal priority, tasks to be done before next intermediate release
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CMS-10652 [BACKPORT 11.2] WhitelistedClassesResourceGuard is not thread-safe

          • Normal - Normal priority, tasks to be done before next intermediate release
          • Closed

          Activity

            People

              Unassigned Unassigned
              mdenburger Mathijs den Burger (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: