I have managed to reproduce the issue in a trivial web application (which basically only logs exception during servlet context initialization) and I can confirm the issue occurs only when using Tomcat 8 (not outside of Tomcat and even not with Tomcat 7). It is caused by a change in the way how Tomcat 8 web application classloader fills urls in CodeSource instances.

I'll see what I can do about that pull request...