tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Remy Maucherat <>
Subject Re: cvs commit: jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper
Date Wed, 22 Jan 2003 19:10:46 GMT
Jeanfrancois Arcand wrote:
> The only problem I see by removing the package org.apache.jsp is that 
> when Tomcat run under the security manager, it is no longer possible to 
> protect an application from package insertion/access (dangerous).
> It is  still possible to protect the application by manually adding the 
> new package name under the conf/ file. This will have 
> to be documented somewhere.

That's a good point, also. (oh, no, I'm back in the middle of a JSPC 
induced mess ;-) )
Ok, I can re-revert my patch ;-)


To unsubscribe, e-mail:   <>
For additional commands, e-mail: <>

View raw message