tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rémy Maucherat <r...@apache.org>
Subject Re: svn commit: r1736178 - in /tomcat/tc8.5.x/trunk/webapps: docs/changelog.xml examples/WEB-INF/classes/http2/SimpleImagePush.java
Date Tue, 22 Mar 2016 11:11:51 GMT
2016-03-22 11:57 GMT+01:00 Konstantin Kolinko <knst.kolinko@gmail.com>:

> This API is unusable when running with a SecurityManager.
>
> I mean, classes in "org.apache.catalina.connector.",
> "org.apache.catalina.core." normally aren't accessible to web
> applications.
>
> It can be solved by introducing a separate package and granting
> permission to access it, like it was done for comet
>
> http://svn.apache.org/viewvc?view=revision&revision=833510
>
>     // Applications using Comet need to be able to access this package
>     permission java.lang.RuntimePermission
> "accessClassInPackage.org.apache.catalina.comet";
>
> It can be o.a.c.push package, in analogy to Comet one. Alternatively,
> there were some thoughts of moving facades to a separate package.
>
> Yes, but the API is unstable (and is marked as such), so I don't think
it's a good idea to do that.

Rémy

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message