[jboss-jira] [JBoss JIRA] (WFLY-6374) Some classes contain static call of AccessController.checkPermission(...)

Hynek Švábek (JIRA) issues at jboss.org
Tue Mar 15 10:34:00 EDT 2016


Hynek Švábek created WFLY-6374:
----------------------------------

             Summary: Some classes contain static call of AccessController.checkPermission(...)
                 Key: WFLY-6374
                 URL: https://issues.jboss.org/browse/WFLY-6374
             Project: WildFly
          Issue Type: Bug
          Components: Web (Undertow)
            Reporter: Hynek Švábek
            Assignee: Stuart Douglas


Some source codes contain wrong static call for permission check
{code}
AccessController.checkPermission(...);
{code}

There must be some like this
{code}
securityManagerInstance.checkPermission(...);
{code}

https://github.com/undertow-io/undertow/blob/master/websockets-jsr/src/main/java/io/undertow/websockets/jsr/UndertowContainerProvider.java#L105
Lines 105, 112, 126
https://github.com/undertow-io/undertow/blob/7db20bdef6cea603b5df9066506e40c8143f109a/servlet/src/main/java/io/undertow/servlet/spec/HttpSessionImpl.java#L216
Line 216
https://github.com/undertow-io/undertow/blob/95051a890cbf655631f26813180fab5c31aa954b/servlet/src/main/java/io/undertow/servlet/handlers/ServletInitialHandler.java#L109
Line 109
https://github.com/undertow-io/undertow/blob/909b972ec3a57555a2b769cec918f3d69a7a4502/servlet/src/main/java/io/undertow/servlet/handlers/ServletRequestContext.java#L64
Lines 64, 71,78, 89
https://github.com/undertow-io/undertow/blob/efb2eb38839473938ab090afb0e8b2781408c783/core/src/main/java/io/undertow/server/HttpServerExchange.java#L1742
Line 1742



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)



More information about the jboss-jira mailing list