Re: WebappClassLoader and prohibited classes/packages

2013-10-24 Thread Christopher Schultz
Martin, On 10/24/13 4:07 AM, Martin Grigorov wrote: > Hi, > > > On Wed, Oct 23, 2013 at 6:38 PM, Christopher Schultz < > ch...@christopherschultz.net> wrote: > >> All, >> >> I went looking into WebappClassLoader's validateJarFile() and filter() >> methods, and I noticed two things: >> >> 1. The

Re: WebappClassLoader and prohibited classes/packages

2013-10-24 Thread Martin Grigorov
Hi, On Wed, Oct 23, 2013 at 6:38 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > All, > > I went looking into WebappClassLoader's validateJarFile() and filter() > methods, and I noticed two things: > > 1. The error message for locating an illegal class being loaded from a > JAR

WebappClassLoader and prohibited classes/packages

2013-10-23 Thread Christopher Schultz
All, I went looking into WebappClassLoader's validateJarFile() and filter() methods, and I noticed two things: 1. The error message for locating an illegal class being loaded from a JAR file references servlet spec 2.3 section 9.7.2. The current published version of the spec (3.0) is now section