Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-10640

WhitelistedClassesResourceGuard is not thread-safe

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Normal
    • Resolution: Fixed
    • 4.2.0, 5.0.0, 2.26.30, 3.2.7, 4.1.2
    • 5.0.0
    • None
    • None

    Description

      The WhitelistedClassesResourceGuard class is not thread-safe, yet a single instance of it is used by Wicket in (possibly) multiple concurrent threads.

      As a result, access to resources may occasionally be denied because the list of whitelisted prefixes is not properly initialized yet. One example we've seen is a failing call for the background image of the console application.

      Attachments

        1. hippo-cms.log
          167 kB
          Arent-Jan Banck

        Issue Links

          Activity

            People

              Unassigned Unassigned
              mdenburger Mathijs den Burger (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: