Author: kkolinko
Date: Sat May 5 16:19:22 2018
New Revision: 1830989
URL: http://svn.apache.org/viewvc?rev=1830989&view=rev
Log:
Fix http://bz.apache.org/bugzilla/show_bug.cgi?id=62350
Add the permission to read property
org.apache.jasper.runtime.BodyContentImpl.BUFFER_SIZE.
Modified:
tomcat/trunk/conf/catalina.policy
tomcat/trunk/webapps/docs/changelog.xml
Modified: tomcat/trunk/conf/catalina.policy
URL:
http://svn.apache.org/viewvc/tomcat/trunk/conf/catalina.policy?rev=1830989&r1=1830988&r2=1830989&view=diff
==============================================================================
--- tomcat/trunk/conf/catalina.policy (original)
+++ tomcat/trunk/conf/catalina.policy Sat May 5 16:19:22 2018
@@ -174,6 +174,8 @@ grant {
// Precompiled JSPs need access to these system properties.
permission java.util.PropertyPermission
+ "org.apache.jasper.runtime.BodyContentImpl.BUFFER_SIZE", "read";
+ permission java.util.PropertyPermission
"org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER", "read";
permission java.util.PropertyPermission
"org.apache.el.parser.COERCE_TO_ZERO", "read";
Modified: tomcat/trunk/webapps/docs/changelog.xml
URL:
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1830989&r1=1830988&r2=1830989&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Sat May 5 16:19:22 2018
@@ -84,6 +84,17 @@
</fix>
</changelog>
</subsection>
+ <subsection name="Jasper">
+ <changelog>
+ <fix>
+ <bug>62350</bug>: Amend <code>catalina.policy</code> file to allow
+ reading system property
+ <code>org.apache.jasper.runtime.BodyContentImpl.BUFFER_SIZE</code>
+ when running under a SecurityManager. This is a follow-up to
+ the fix for <bug>43925</bug>. (kkolinko)
+ </fix>
+ </changelog>
+ </subsection>
<subsection name="WebSocket">
<changelog>
<update>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
