https://bz.apache.org/bugzilla/show_bug.cgi?id=57673

            Bug ID: 57673
           Summary: AccessControlException accessing
                    org.apache.taglibs.standard.xml.accessExternalEntity
           Product: Taglibs
           Version: unspecified
          Hardware: PC
                OS: Mac OS X 10.1
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Standard Taglib
          Assignee: dev@tomcat.apache.org
          Reporter: jboy...@apache.org

http://svn.apache.org/r1658754 added a check of the
org.apache.taglibs.standard.xml.accessExternalEntity system property during
initialization of XmlUtil. When a SecurityManager is present this check will
fail unless permission has been granted for the library to do that.

This may affect applications even if they do not use the XML tags because the
he JSTL <c:> core library includes a TLV that parses the XML view of the page
at translation time, obtaining the parser from the XmlUtil class. If permission
has not been granted then the check fails, a NoClassDefError is thrown, and the
JSP compilation will fail.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to