This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/8.5.x by this push: new a3bd927 Fix 65332 - javac permissions with Java 9 onwards for JSPs a3bd927 is described below commit a3bd927ff223bf06925771e1f9d5986af0427f45 Author: Mark Thomas <ma...@apache.org> AuthorDate: Tue Jun 8 09:39:16 2021 +0100 Fix 65332 - javac permissions with Java 9 onwards for JSPs https://bz.apache.org/bugzilla/show_bug.cgi?id=65332 --- conf/catalina.policy | 7 ++++++- webapps/docs/changelog.xml | 7 +++++++ 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/conf/catalina.policy b/conf/catalina.policy index 0567324..5cfab09 100644 --- a/conf/catalina.policy +++ b/conf/catalina.policy @@ -50,9 +50,14 @@ grant codeBase "file:${java.home}/lib/ext/-" { permission java.security.AllPermission; }; +// This permission is required when using javac to compile JSPs on Java 9 +// onwards +//grant codeBase "jrt:/jdk.compiler" { +// permission java.security.AllPermission; +//}; -// ========== CATALINA CODE PERMISSIONS ======================================= +// ========== CATALINA CODE PERMISSIONS ======================================= // These permissions apply to the daemon code grant codeBase "file:${catalina.home}/bin/commons-daemon.jar" { diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml index 38b27ca..d37bcaf 100644 --- a/webapps/docs/changelog.xml +++ b/webapps/docs/changelog.xml @@ -218,6 +218,13 @@ parameters, the method that requires the fewest varargs is preferred. (markt) </fix> + <add> + <bug>65332</bug>: Add a commented out section in + <code>catalina.policy</code> that provides the necessary permissions to + compile JSPs with javac when running on Java 9 onwards with a security + manager. It is commented out as it will cause errors if used with + earlier Java versions. (markt) + </add> </changelog> </subsection> <subsection name="WebSocket"> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org