https://bz.apache.org/bugzilla/show_bug.cgi?id=62350
--- Comment #2 from Konstantin Kolinko <knst.koli...@gmail.com> --- (In reply to Remy Maucherat from comment #1) Good question. Looking into org.apache.jasper.security.SecurityClassLoad class in 8.5, it preloads some runtime classes, but BodyContentImpl class is not preloaded. I think adding it to the preload list looks better in the long term. No need for downstream packagers to change their policy files. Permission in catalina.policy is the only way when java source generated for a jsp page does explicit reading of this property. I have not looked for historic use of LIMIT_BUFFER, but I am sure that for BUFFER_SIZE there are no such reads. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
