Author: markt
Date: Tue Sep 27 20:08:59 2011
New Revision: 1176584
URL: http://svn.apache.org/viewvc?rev=1176584&view=rev
Log:
ContainerServlets are always restricted.
Modified:
tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java
Modified: tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java
URL:
http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java?rev=1176584&r1=1176583&r2=1176584&view=diff
==============================================================================
--- tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java
(original)
+++ tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java Tue
Sep 27 20:08:59 2011
@@ -532,6 +532,10 @@ public class DefaultInstanceManager impl
if (Filter.class.isAssignableFrom(clazz)) {
checkAccess(clazz, restrictedFilters);
} else if (Servlet.class.isAssignableFrom(clazz)) {
+ if (ContainerServlet.class.isAssignableFrom(clazz)) {
+ throw new SecurityException("Restricted (ContainerServlet) " +
+ clazz);
+ }
checkAccess(clazz, restrictedServlets);
} else {
checkAccess(clazz, restrictedListeners);
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
