Platform extension removal

[former_member630793]

Hi,

We have found a security bug in hybris\bin\ext-platform-optional\virtualjdbc extension and we are not using it in our application. Could you suggest options how to remove this extension from platform. Our localextensions.xml file contains entry <path dir='${HYBRIS_BIN_DIR}' autoload='false' /> which doesn't refer 'virtualjdbc' specifically and we are using other extensions form this folder.

Any ideas are appreciated.

Regards, Arun

[former_member620692 · Accepted solution]

Hi Arun Sharma - the syntax to exclude this extension is as follows:

ant extensionsxml -Dplatform.extensions=" *,-virtualjdbc"

Please check https://wiki.hybris.com/pages/viewpage.action?pageId=141792669#ConfiguringAvailableExtensions-Exclud... for more information.

However, unless you mention <path autoload="true" dir="${HYBRIS_BIN_DIR}/ext-platform-optional"/> in your localextensions.xml, the extensions in ext-platform-optional are not loaded automatically. You must be already aware that only ${HYBRIS_BIN_DIR}/platform/ext are loaded automatically.