Phillip Webb 08cc62a6b6 Simplify JarFileUrlKey to prevent issues with Cortex XDR agent ...

Replace the string based `JarFileUrlKey` and cache with a simple key
built directly from URL components. This should allow cache lookups
to remain fast whilst removing any `URLStreamHandler.getHostAddress`
calls.

Prior to this commit, we assumed that it was safe to use the URL
directly as a cache key as long as it had an empty or null `host`.
This assumption isn't correct when Palo Alto Network Cortex XDR agent
is present as it appears to intercept calls to `getHostAddress`
and, unlike the JDK code, always perform a DNS lookup.

Fixes gh-46401

2025-07-10 18:05:16 -07:00

..

java/org/springframework/boot/loader

Simplify JarFileUrlKey to prevent issues with Cortex XDR agent

2025-07-10 18:05:16 -07:00

resources

Improve loading of jar entry certificates

2024-08-22 10:56:25 +01:00