Use the System.getSecurityManager(), not the SecurityManager specified
by the field of the class JasperLoader.

(Question:  What is the interest of field (securityManager) into
JasperLoader.class  ? )

Regards,

Olivier.




Index: JasperLoader.java
===================================================================
RCS file:
/home/cvspublic/jakarta-tomcat-4.0/jasper/src/share/org/apache/jasper/servlet/JasperLoader.java,v
retrieving revision 1.5
diff -u -r1.5 JasperLoader.java
--- JasperLoader.java   2001/06/22 20:13:19     1.5
+++ JasperLoader.java   2001/08/10 12:12:53
@@ -177,7 +177,7 @@
         if (System.getSecurityManager() != null) {     
             if (dot >= 0) {                
                 try {                    
-                   
securityManager.checkPackageAccess(name.substring(0,dot));
+                   
System.getSecurityManager().checkPackageAccess(name.substring(0,dot));
                 } catch (SecurityException se) {
                     String error = "Security Violation, attempt to use
" +
                         "Restricted Class: " + name;
begin:vcard 
n:oeuillot;olivier
tel;fax:+33 5 56 07 97 09
tel;work:+33 5 56 07 97 07
x-mozilla-html:FALSE
url:http://www.fingo.com
org:FinGO SA
adr:;;10 rue léonard de vinci;Pessac (Bordeaux);;33600;France
version:2.1
email;internet:[EMAIL PROTECTED]
title:CTO
x-mozilla-cpt:;2528
fn:olivier oeuillot
end:vcard

Reply via email to