Kusal Kithul-Godage created WW-5313:
---------------------------------------
Summary: Struts default class exclusion list is not compatible
with JRE21
Key: WW-5313
URL: https://issues.apache.org/jira/browse/WW-5313
Project: Struts 2
Issue Type: Improvement
Components: Core
Affects Versions: 6.1.2
Reporter: Kusal Kithul-Godage
Fix For: 6.2.0
Following [JDK-8205129|https://bugs.openjdk.org/browse/JDK-8205129],
`java.lang.Compiler` no longer exists and causes a Struts application using the
default class exclusion list to fail to start.
Whilst that class can be removed from the exclusion list, the application will
then be less secure when run on JREs older than 21.
Perhaps we can keep, but silently ignore the `java.lang.Compiler` exclusion
when the detected JRE version is 21 or greater.
This will allow a Struts application to be run on any JRE without having to
change the exclusion list depending on the JRE on which it is intended to run.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
