https://issues.apache.org/bugzilla/show_bug.cgi?id=54740
--- Comment #1 from Mark Thomas <ma...@apache.org> --- The Servlet 3.0 scanning mechanism only requires that the class may be loaded. The WebSocket spec limits @ServerEndpoint to "public, concrete, and have a public no-args constructor". It seems reasonable to me to limit ServerEndpointConfig classes with the same rules. Discovered ServerEndpointConfig classes may be filters with a ServerApplicationConfig implementation (section 6.2 of the WebSocket spec). -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org