https://bz.apache.org/bugzilla/show_bug.cgi?id=63781
--- Comment #1 from Mark Thomas <ma...@apache.org> --- Created attachment 36807 --> https://bz.apache.org/bugzilla/attachment.cgi?id=36807&action=edit Draft patch The fix for this is rather more involved than it might first appear. The check in Java is AccessibleObject.canAccess(Object) but that is a new method in Java 9 and the EL API (and implementation) have to work on Java 8. That means introducing a cut-down version of JreCompat into the EL API. There are a further 9 places in EL API where Modifiers.isPublic() is called. Each of those also need to be checked to see if a similar change is required there. As do the 7 places it is called elsewhere in the Tomcat code base. I've attached a draft patch that addresses the specific issue raised in this report for review / comment. I intend to use this as the basis for a broader, more complete patch. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org