This is a very trivial problem, and I cant find a way how to solve, 
even read through the FAQ, and docs.
Currnetly it is possible to load a, not servlet class with a fully 
qualified classpath from the mount point. Like:
http://localhost/servlet/org.gjt.mm.mysql.Driver

I see the mod_jserv is not initiate this kinda class, but load it, to 
try to cast:

I run into a pretty similar problem when I did the recursive rmic 
tool.
The first version load the class files to examine are they implement 
java.rmi.Remote to make the rmic on the Remote implementation.
But this (logically good) approach comes with a problem with the 
static initialization of the classes, since I have about 4000 class 
file.
So finally, I decide to search for the *Impl.class filter.

I feel the same with this.
I even feel some security problem too, where to user can "try" to load 
classes on the server side...
I like to suggest a strict mount option, where the mod accept only the 
zone aliased classes from the URL encoding.
Or the mount point flat servlets...

Sorry, If I miss something, and there is a trivial way to avoid to 
initialization of the class static methods.

I even can fix it, in the JservletManager.loadServlet(), but I dunno 
what is the polite way to modify the code.






--
----------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Archives and Other:  <http://java.apache.org/main/mail.html>
Problems?:           [EMAIL PROTECTED]

Reply via email to