tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 64488] EL API: AccessControlException -- Import Handler
Date Tue, 02 Jun 2020 07:55:33 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=64488

Mark Thomas <markt@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO

--- Comment #1 from Mark Thomas <markt@apache.org> ---
The ImportHandler code should not be made privileged.

You need to grant the necessary permissions to whatever code calls
ImportHandler.

In a default Tomcat installation, the necessary permission should be granted in
the catalina.policy file.

It is possible, but unlikely, that a privileged block is missing elsewhere. If
you can provide the simplest possible JSP that triggers this issue on a clean
Tomcat 10 install we can take a look.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message