tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Remy Maucherat <>
Subject Re: session facade not used for event
Date Tue, 01 Jun 2004 22:08:39 GMT
Filip Hanik - Dev wrote:
>>>Facading is likely worthless for sessions,
> you think so, you don't think session.setPrincipal is a security issue?

Missed that one ;)
As Jean-François said, the security manager will avoid the problem. I 
think it won't hurt replacing the "this"s with "getSession()"s in the 
event constructors, though.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message