mt...@apache.org wrote: > * Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=38352 > JSPs should have read/write access to the context's temp dir > http://svn.apache.org/viewvc?rev=786490&view=rev > +1: markt, fhanik > + +1: mturk - however I agree with Bill Barker this needs further research > + because it can bloat the tmp dir.
Impact should be minimal: - this only allows a JSP to do under a security manager what it can do normally - Servlets can already write here with a security manager --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org