[jboss-jira] [JBoss JIRA] (JBEE-151) Missing doPrivileged block(s) around getContextClassLoader

[Shelly McGowan (JIRA)]

    [ https://issues.jboss.org/browse/JBEE-151?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12952489#comment-12952489 ] 

Shelly McGowan edited comment on JBEE-151 at 3/13/14 8:55 AM:
--------------------------------------------------------------

Upstream patch committed to jboss-el-api_2.2 branch:
https://github.com/jboss/jboss-el-api_spec/commit/88e00f1d2e901cf6945471c573583fe0f0d8d58d


EL 2.2 API v1.0.4.Final has been released:
https://repository.jboss.org/nexus/content/groups/public/org/jboss/spec/javax/el/jboss-el-api_2.2_spec/1.0.4.Final/

                
      was (Author: shelly.mcgowan):
    Upstream patch committed to jboss-el-api_2.2 branch:
https://github.com/jboss/jboss-el-api_spec/commit/88e00f1d2e901cf6945471c573583fe0f0d8d58d


                  
>  Missing doPrivileged block(s) around getContextClassLoader
> -----------------------------------------------------------
>
>                 Key: JBEE-151
>                 URL: https://issues.jboss.org/browse/JBEE-151
>             Project: JBoss JavaEE Spec APIs
>          Issue Type: Bug
>          Components: jboss-el-api
>            Reporter: Carlo de Wolf
>            Assignee: Shelly McGowan
>             Fix For: jboss-el-api_2.2_spec-1.0.4.Final, jboss-el-api_3.0_spec-1.0.1.Final
>
>
> jboss-el-api_2.2_spec-1.0.2.Final-redhat-1.jar:1.0.2.Final-redhat-1
> {code}
> 12:56:34,897 ERROR [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/read-props].[jsp]] (http-/127.0.0.1:8080-4) JBWEB000236: Servlet.service() for servlet jsp threw exception: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "getClassLoader")
> 	at java.security.AccessControlContext.checkPermission(AccessControlContext.java:372) [rt.jar:1.7.0_45]
> 	at java.security.AccessController.checkPermission(AccessController.java:559) [rt.jar:1.7.0_45]
> 	at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) [rt.jar:1.7.0_45]
> 	at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1561) [rt.jar:1.7.0_45]
> 	at java.lang.Thread.getContextClassLoader(Thread.java:1472) [rt.jar:1.7.0_45]
> 	at javax.el.FactoryFinder.find(FactoryFinder.java:130) [jboss-el-api_2.2_spec-1.0.2.Final-redhat-1.jar:1.0.2.Final-redhat-1]
> 	at javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:185) [jboss-el-api_2.2_spec-1.0.2.Final-redhat-1.jar:1.0.2.Final-redhat-1]
> 	at javax.el.ExpressionFactory.newInstance(ExpressionFactory.java:156) [jboss-el-api_2.2_spec-1.0.2.Final-redhat-1.jar:1.0.2.Final-redhat-1]
> 	at org.apache.jasper.runtime.JspApplicationContextImpl.<init>(JspApplicationContextImpl.java:48) [jbossweb-7.4.0.Beta4.jar:7.4.0.Beta4]
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira