tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Filip Hanik \(lists\)" <devli...@hanik.com>
Subject RE: session facade not used for event
Date Tue, 01 Jun 2004 23:59:34 GMT
ok, I can do this tomorrow.

Filip

-----Original Message-----
From: Remy Maucherat [mailto:remm@apache.org]
Sent: Tuesday, June 01, 2004 5:09 PM
To: Tomcat Developers List
Subject: Re: session facade not used for event


Filip Hanik - Dev wrote:
>>>Facading is likely worthless for sessions,
>
> you think so, you don't think session.setPrincipal is a security issue?

Missed that one ;)
As Jean-François said, the security manager will avoid the problem. I
think it won't hurt replacing the "this"s with "getSession()"s in the
event constructors, though.

Rémy


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.692 / Virus Database: 453 - Release Date: 5/28/2004


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Mime
View raw message