It's not called by 3.3. Like everybody else, 3.3 doesn't know anything about o.a.c.http.**.
----- Original Message ----- From: "Jean-Francois Arcand" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Tuesday, October 22, 2002 2:46 PM Subject: [3.3] Is methodo.a.c.http11.Http11Processor.addFilter used > Hi, > > is method o.a.c.http11.Http11Processor.addFilter used by Tomcat 3.x? The > method is not used in 4.1.X and 5, and I would like to remove it. The > method gives direct access to Class.forName, and this is a "lightweight" > security issue. > > Thanks, > > -- Jeanfrancois > > > -- > To unsubscribe, e-mail: <mailto:tomcat-dev-unsubscribe@;jakarta.apache.org> > For additional commands, e-mail: <mailto:tomcat-dev-help@;jakarta.apache.org> > -- To unsubscribe, e-mail: <mailto:tomcat-dev-unsubscribe@;jakarta.apache.org> For additional commands, e-mail: <mailto:tomcat-dev-help@;jakarta.apache.org>
