[jboss-jira] [JBoss JIRA] (AS7-6684) Jasper using wrong ProtectionDomain for compiled JSP

David Lloyd (JIRA) jira-events at lists.jboss.org
Wed Mar 6 14:40:56 EST 2013


David Lloyd created AS7-6684:
--------------------------------

             Summary: Jasper using wrong ProtectionDomain for compiled JSP
                 Key: AS7-6684
                 URL: https://issues.jboss.org/browse/AS7-6684
             Project: Application Server 7
          Issue Type: Bug
          Components: Web
            Reporter: David Lloyd
            Assignee: Remy Maucherat
             Fix For: 8.0.0.Alpha1


Compiled JSPs loaded via JasperLoader appear to be using a different ProtectionDomain than the rest of the WAR deployment.  I think it should probably be using a PD which contains the permissions from the deployment's ClassLoader, and probably the CodeSource from the deployment unit from which the JSP file originated.  This will ensure that permissions set via deployment descriptor and/or the management model will take proper effect.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list