Mailing-List: contact dev-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Developers List" <dev@tomcat.apache.org>
MIME-Version: 1.0
In-Reply-To: 
 <CABzHfV=LLqNGHtiZLnmTR2aOXjSxd6i5jtOxw4XvuTCdik+UnQ@mail.gmail.com>
References: <20160322103336.AD83B3A0113@svn01-us-west.apache.org>
	<CABzHfV=LLqNGHtiZLnmTR2aOXjSxd6i5jtOxw4XvuTCdik+UnQ@mail.gmail.com>
Date: Tue, 22 Mar 2016 12:11:51 +0100
Message-ID: 
 <CANwj8ZrAE2H72U_DPqcFy0voNUjS8aSTMFRXeBTVn0Jo==CcuA@mail.gmail.com>
Subject: Re: svn commit: r1736178 - in /tomcat/tc8.5.x/trunk/webapps:
 docs/changelog.xml examples/WEB-INF/classes/http2/SimpleImagePush.java
From: =?UTF-8?Q?R=C3=A9my_Maucherat?= <remm@apache.org>
To: Tomcat Developers List <dev@tomcat.apache.org>
Content-Type: multipart/alternative; boundary=001a11408a04bab75d052ea14704

--001a11408a04bab75d052ea14704
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

2016-03-22 11:57 GMT+01:00 Konstantin Kolinko <knst.kolinko@gmail.com>:

> This API is unusable when running with a SecurityManager.
>
> I mean, classes in "org.apache.catalina.connector.",
> "org.apache.catalina.core." normally aren't accessible to web
> applications.
>
> It can be solved by introducing a separate package and granting
> permission to access it, like it was done for comet
>
> http://svn.apache.org/viewvc?view=3Drevision&revision=3D833510
>
>     // Applications using Comet need to be able to access this package
>     permission java.lang.RuntimePermission
> "accessClassInPackage.org.apache.catalina.comet";
>
> It can be o.a.c.push package, in analogy to Comet one. Alternatively,
> there were some thoughts of moving facades to a separate package.
>
> Yes, but the API is unstable (and is marked as such), so I don't think
it's a good idea to do that.

R=C3=A9my

--001a11408a04bab75d052ea14704--