https://issues.apache.org/bugzilla/show_bug.cgi?id=48097

Konstantin Kolinko <knst.koli...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |

--- Comment #13 from Konstantin Kolinko <knst.koli...@gmail.com> 2009-11-12 
11:13:01 UTC ---
Reopening.

The WebappClassLoader$PrivilegedFindResourceByName class (added in rev.834814)
has to be preloaded in o.a.c.security.SecurityClassLoad#loadLoaderPackage().

That can be demonstrated by the following:
1. Deploy the sample ROOT application, as described in comment #6
2. Copy default conf/web.xml to webapps/ROOT/WEB-INF/
3. Remove all content from the default conf/web.xml and leave just the root XML
tag and its attributes.
4. Start  catalina.bat start -security
5. Access http://localhost:8080/
6. Observe the exception

Usually the first calls to WebappClassLoader#findResourceInternal() are to load
JspServlet and DefaultServlet. In this configuration those are avoided.


This is already fixed in trunk. I will propose a backport soon.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to