Mailing-List: contact dev-help@lucene.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@lucene.apache.org
Date: Wed, 26 Sep 2012 07:02:09 +1100 (NCT)
From: "Uwe Schindler (JIRA)" <jira@apache.org>
To: dev@lucene.apache.org
Message-ID: <1298060236.124724.1348603329810.JavaMail.jiratomcat@arcas>
In-Reply-To: <1449882108.117518.1348509068162.JavaMail.jiratomcat@arcas>
Subject: [jira] [Commented] (SOLR-3879) war file has javax.servlet-api jar
 bundled
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


    [ https://issues.apache.org/jira/browse/SOLR-3879?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D13463=
161#comment-13463161 ]=20

Uwe Schindler commented on SOLR-3879:
-------------------------------------

We should maybe also do the same check on all Lucene-generated jar files?
               =20
> war file has javax.servlet-api jar bundled
> ------------------------------------------
>
>                 Key: SOLR-3879
>                 URL: https://issues.apache.org/jira/browse/SOLR-3879
>             Project: Solr
>          Issue Type: Bug
>          Components: Build
>    Affects Versions: 4.0
>            Reporter: Roman Shaposhnik
>            Priority: Critical
>             Fix For: 4.0
>
>         Attachments: SOLR-3879.patch, SOLR-3879.patch.txt
>
>
> This is incorrect and can lead to deployment issues:
> {noformat}
> Servlet Spec 2.5
> SRV.9.7.2 Web Application Class Loader
> The class loader that a container uses to load a servlet in a WAR must
> allow the developer to load any resources contained in library JARs
> within the WAR following normal J2SE semantics using getResource. As
> described in the J2EE license agreement, servlet containers that are
> not part of a J2EE product should not allow the application to
> override J2SE platform classes, such as those in the java.* and
> javax.* namespaces, that J2SE does not allow to be modified. Also,
> servlet containers that are part of a J2EE product should not allow
> the application to override J2SE or J2EE platform classes, such as
> those in java.* and javax.* namespaces, that either J2SE or J2EE do
> not allow to be modified. The container should not allow applications
> to override or access the container=E2=80=99s implementation
> {noformat}
> The fix is pretty easy and it would be nice to include it in the upcoming=
 release of Solr 4.0

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org