https://issues.apache.org/bugzilla/show_bug.cgi?id=49082
Summary: ExpressionFactory.newInstance needs to be privileged
Product: Tomcat 7
Version: trunk
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: normal
Priority: P2
Component: Servlet & JSP API
AssignedTo: [email protected]
ReportedBy: [email protected]
The ExpressionFactory.newInstance method needs to be wrapped in a privileged
block so as to not throw an exception for security reasons.
I'm currently seeing a java.security.AccessControlException on el.properties
when calling getClassNameJreDir().
Also, the System.getProperty("java.home") does not need to have a trailing
separator? I would think you would want to modify the PROPERTY_FILE for
el.properties to check for this final separator character.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
