Return-Path: Delivered-To: apmail-jakarta-tomcat-dev-archive@apache.org Received: (qmail 97377 invoked from network); 16 Aug 2003 03:52:04 -0000 Received: from exchange.sun.com (192.18.33.10) by daedalus.apache.org with SMTP; 16 Aug 2003 03:52:04 -0000 Received: (qmail 14068 invoked by uid 97); 16 Aug 2003 03:54:56 -0000 Delivered-To: qmlist-jakarta-archive-tomcat-dev@nagoya.betaversion.org Received: (qmail 14061 invoked from network); 16 Aug 2003 03:54:55 -0000 Received: from daedalus.apache.org (HELO apache.org) (208.185.179.12) by nagoya.betaversion.org with SMTP; 16 Aug 2003 03:54:55 -0000 Received: (qmail 96605 invoked by uid 500); 16 Aug 2003 03:51:55 -0000 Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Developers List" Reply-To: "Tomcat Developers List" Delivered-To: mailing list tomcat-dev@jakarta.apache.org Received: (qmail 96592 invoked from network); 16 Aug 2003 03:51:55 -0000 Received: from exchange.sun.com (192.18.33.10) by daedalus.apache.org with SMTP; 16 Aug 2003 03:51:55 -0000 Received: (qmail 14054 invoked by uid 50); 16 Aug 2003 03:54:47 -0000 Date: 16 Aug 2003 03:54:47 -0000 Message-ID: <20030816035447.14053.qmail@nagoya.betaversion.org> From: bugzilla@apache.org To: tomcat-dev@jakarta.apache.org Cc: Subject: DO NOT REPLY [Bug 22183] - Copy of Jasper in WEB-INF confuses Tomcat X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22183 Copy of Jasper in WEB-INF confuses Tomcat glenn@apache.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Additional Comments From glenn@apache.org 2003-08-16 03:54 ------- The jar for jasper should not be placed inside a web application. To ensure that this does not cause problems if the jar for jasper gets placed in a web apps /WEB-INF/lib when you run Tomcat, start Tomcat with the -security option. This puts in place package access restrictions which will prevent org.apache.jasper classes from being loaded by the web application class loader. --------------------------------------------------------------------- To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org