https://issues.apache.org/bugzilla/show_bug.cgi?id=57441
--- Comment #3 from Konstantin Kolinko <knst.koli...@gmail.com> --- Is it at all possible to reliably validate functions at compile time? Maybe whitelist functions that have name only with no prefix? BTW, it is possible to use javax.el.ImportHandler.importStatic() to declare a function by importing a static method of a class. An example of manipulating ImportHandler at run time is in bug 57142. If it is manipulated at run time, it means that the information is not available at compile time to perform validation. https://issues.apache.org/bugzilla/show_bug.cgi?id=57142#c1 -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
