Return-Path: Delivered-To: apmail-jakarta-tomcat-dev-archive@apache.org Received: (qmail 83862 invoked from network); 22 Jan 2003 19:18:24 -0000 Received: from exchange.sun.com (192.18.33.10) by 208.185.179.12.available.above.net with SMTP; 22 Jan 2003 19:18:24 -0000 Received: (qmail 733 invoked by uid 97); 22 Jan 2003 19:19:43 -0000 Delivered-To: qmlist-jakarta-archive-tomcat-dev@jakarta.apache.org Received: (qmail 653 invoked by uid 97); 22 Jan 2003 19:19:42 -0000 Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Developers List" Reply-To: "Tomcat Developers List" Delivered-To: mailing list tomcat-dev@jakarta.apache.org Received: (qmail 628 invoked by uid 98); 22 Jan 2003 19:19:41 -0000 X-Antivirus: nagoya (v4218 created Aug 14 2002) X-Injected-Via-Gmane: http://gmane.org/ To: tomcat-dev@jakarta.apache.org From: Costin Manolache Subject: Re: cvs commit: jakarta-tomcat-jasper/jasper2/src/share/org/apache/jasper JspC.java Date: Wed, 22 Jan 2003 11:16:23 -0800 Lines: 25 Message-ID: References: <20030122114001.51465.qmail@icarus.apache.org> <3E2ECC04.6010706@gefionsoftware.com> <3E2ECD58.3090104@apache.org> <3E2EDCDC.3000005@apache.org> <3E2EE8C0.80405@gefionsoftware.com> <3E2EEA77.6000306@apache.org> <3E2EEBD6.9010605@apache.org> <3E2EECB6.3080606@apache.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7Bit X-Complaints-To: usenet@main.gmane.org User-Agent: KNode/0.7.1 Sender: news X-Spam-Rating: 208.185.179.12.available.above.net 1.6.2 0/1000/N X-Spam-Rating: 208.185.179.12.available.above.net 1.6.2 0/1000/N Remy Maucherat wrote: > Jeanfrancois Arcand wrote: >> The only problem I see by removing the package org.apache.jsp is that >> when Tomcat run under the security manager, it is no longer possible to >> protect an application from package insertion/access (dangerous). >> >> It is still possible to protect the application by manually adding the >> new package name under the conf/tomcat.properties file. This will have >> to be documented somewhere. > > That's a good point, also. (oh, no, I'm back in the middle of a JSPC > induced mess ;-) ) > Ok, I can re-revert my patch ;-) It won't change a thing - if you have org.apache.jsp package for all jsps in the web site. My problem with org.apache.jsp -> it's apache specific and it's too long. To be honest - I don't care, since I'll use the prefix explicitely in jspc. And the mess is not jspc - but JspServlet :-) Costin -- To unsubscribe, e-mail: For additional commands, e-mail: