[Bug 62080] EL Util class should have doPrivileged block

2018-06-06 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62080

Mark Thomas  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |FIXED

--- Comment #3 from Mark Thomas  ---
My local testing found that the class loader structure would need to be fairly
unusual to trigger this issue. I therefore opted to wrap all the requests for
the TCCL in a privileged action to ensure that all use cases were covered. 

Fixed in:
- trunk for 9.0.9 onwards
- 8.5.x for 8.5.32 onwards
- 8.0.x for 8.0.53 onwards
- 7.0.x for 7.0.89 onwards

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 62080] EL Util class should have doPrivileged block

2018-06-06 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62080

Mark Thomas  changed:

   What|Removed |Added

 Status|NEEDINFO|NEW

--- Comment #2 from Mark Thomas  ---
I've spent a little time looking a this. It isn't going to occur in normal
Tomcat usage. It may occur if el-api.jar and jasper-el.jar are used
independently. I'm working on a fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



[Bug 62080] EL Util class should have doPrivileged block

2018-02-06 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62080

Konstantin Kolinko  changed:

   What|Removed |Added

Summary|EL Util class should have   |EL Util class should have
   |doPrivledge block   |doPrivileged block

-- 
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org