This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 10.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.0.x by this push:
new 6d34eb6 Fix 65332 - javac permissions with Java 9 onwards for JSPs
6d34eb6 is described below
commit 6d34eb633371931480aecb59895c45b018d17408
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Tue Jun 8 09:39:16 2021 +0100
Fix 65332 - javac permissions with Java 9 onwards for JSPs
https://bz.apache.org/bugzilla/show_bug.cgi?id=65332
---
conf/catalina.policy | 7 ++++++-
webapps/docs/changelog.xml | 7 +++++++
2 files changed, 13 insertions(+), 1 deletion(-)
diff --git a/conf/catalina.policy b/conf/catalina.policy
index 2e6f8df..91b7c83 100644
--- a/conf/catalina.policy
+++ b/conf/catalina.policy
@@ -50,9 +50,14 @@ grant codeBase "file:${java.home}/lib/ext/-" {
permission java.security.AllPermission;
};
+// This permission is required when using javac to compile JSPs on Java 9
+// onwards
+//grant codeBase "jrt:/jdk.compiler" {
+// permission java.security.AllPermission;
+//};
-// ========== CATALINA CODE PERMISSIONS =======================================
+// ========== CATALINA CODE PERMISSIONS =======================================
// These permissions apply to the daemon code
grant codeBase "file:${catalina.home}/bin/commons-daemon.jar" {
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 1501001..72d4445 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -218,6 +218,13 @@
parameters, the method that requires the fewest varargs is preferred.
(markt)
</fix>
+ <add>
+ <bug>65332</bug>: Add a commented out section in
+ <code>catalina.policy</code> that provides the necessary permissions to
+ compile JSPs with javac when running on Java 9 onwards with a security
+ manager. It is commented out as it will cause errors if used with
+ earlier Java versions. (markt)
+ </add>
</changelog>
</subsection>
<subsection name="WebSocket">
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
