tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Remy Maucherat <r...@apache.org>
Subject Re: session facade not used for event
Date Tue, 01 Jun 2004 22:08:39 GMT
Filip Hanik - Dev wrote:
>>>Facading is likely worthless for sessions,
> 
> you think so, you don't think session.setPrincipal is a security issue?

Missed that one ;)
As Jean-François said, the security manager will avoid the problem. I 
think it won't hurt replacing the "this"s with "getSession()"s in the 
event constructors, though.

Rémy


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Mime
View raw message