When running with a JAR on Windows loaded from a UNC path and enabling the security manager, calls to ClassLoader.getResource (and getResourceAsStream) fail even though the requested resource exists in the JAR.

Debugging with java.security.debug shows that the operation requests a FilePermission for a different file than the one where the resource resides in.