On Mon, 3 Aug 2026 18:20:18 GMT, Joe Wang <[email protected]> wrote: >> I think this will need another set of eyes as allowing file:/dir/* should >> not allow file:/dir/../foo.dtd. > > Makes sense. Added path normalization to fix the issue.
I think this is okay, and is aligned with the lexical matching of java.io.FilePermission since JDK 9 (and JDK-8164705). ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/32098#discussion_r4052591446
