2016-03-22 11:57 GMT+01:00 Konstantin Kolinko <knst.koli...@gmail.com>:

> This API is unusable when running with a SecurityManager.
>
> I mean, classes in "org.apache.catalina.connector.",
> "org.apache.catalina.core." normally aren't accessible to web
> applications.
>
> It can be solved by introducing a separate package and granting
> permission to access it, like it was done for comet
>
> http://svn.apache.org/viewvc?view=revision&revision=833510
>
>     // Applications using Comet need to be able to access this package
>     permission java.lang.RuntimePermission
> "accessClassInPackage.org.apache.catalina.comet";
>
> It can be o.a.c.push package, in analogy to Comet one. Alternatively,
> there were some thoughts of moving facades to a separate package.
>
> Yes, but the API is unstable (and is marked as such), so I don't think
it's a good idea to do that.

Rémy

Reply via email to