Author: markt Date: Tue Sep 27 20:08:59 2011 New Revision: 1176584 URL: http://svn.apache.org/viewvc?rev=1176584&view=rev Log: ContainerServlets are always restricted.
Modified: tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java Modified: tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java URL: http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java?rev=1176584&r1=1176583&r2=1176584&view=diff ============================================================================== --- tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java (original) +++ tomcat/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java Tue Sep 27 20:08:59 2011 @@ -532,6 +532,10 @@ public class DefaultInstanceManager impl if (Filter.class.isAssignableFrom(clazz)) { checkAccess(clazz, restrictedFilters); } else if (Servlet.class.isAssignableFrom(clazz)) { + if (ContainerServlet.class.isAssignableFrom(clazz)) { + throw new SecurityException("Restricted (ContainerServlet) " + + clazz); + } checkAccess(clazz, restrictedServlets); } else { checkAccess(clazz, restrictedListeners); --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org