jfarcand 2002/11/07 14:52:25
Modified: catalina/src/share/org/apache/catalina/security
SecurityConfig.java
Log:
By default (if the catalina.properties is not founded), do not protect
org.apache.jsp, but org.apache.jasper. org.apache.jsp should not be protected.
Revision Changes Path
1.5 +2 -2
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/security/SecurityConfig.java
Index: SecurityConfig.java
===================================================================
RCS file:
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/security/SecurityConfig.java,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- SecurityConfig.java 4 Nov 2002 05:16:23 -0000 1.4
+++ SecurityConfig.java 7 Nov 2002 22:52:25 -0000 1.5
@@ -76,7 +76,7 @@
private final static String PACKAGE_ACCESS = "sun.,"
+ "org.apache.catalina."
- + ",org.apache.jsp."
+ + ",org.apache.jasper."
+ ",org.apache.coyote."
+ ",org.apache.tomcat.";
@@ -84,7 +84,7 @@
+ ",org.apache.catalina."
+ ",org.apache.coyote."
+ ",org.apache.tomcat."
- + ",org.apache.jsp.";
+ + ",org.apache.jasper.";
/**
* List of protected package from conf/catalina.properties
*/
--
To unsubscribe, e-mail: <mailto:tomcat-dev-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-dev-help@;jakarta.apache.org>
