Hi, I am not able to test this properly in the next two weeks. :( I wonder: If a servlet starts threads, should the thread not be able to see the SecurityManager?
Can you give us some more insights? - Ben Am Sa., 12. Apr. 2025 um 23:17 Uhr schrieb <le...@flowlogix.com>: > > Hi, > > During testing of Shiro 2.0.3, I ran into a bug that existed since Shiro 1.1.0 > It uses InheritableThreadLocal map to save SecurityManager, Session, etc. > I found that it causes ThreadLocal leakages whenever a servlet, for example, > starts any other threads. > > Please see https://github.com/apache/shiro/issues/2081 and > https://github.com/apache/shiro/pull/2082 > > Any feedback would be appreciated. I am looking to merge and release 2.0.4 > that includes this fix ASAP, > so if you have an issue with the way this was fixed, please let me know. > > Thank you! >
