Bug 55019

Summary: <jsp:include page="blabla" flush="true"/> failed to compile under security manager
Product: Tomcat 6 Reporter: jfclere <jfclere>
Component: JasperAssignee: Tomcat Developers Mailing List <dev>
Severity: normal    
Priority: P2    
Version: unspecified   
Target Milestone: default   
Hardware: PC   
OS: Linux   
Attachments: Patch to fix the problem
Simple webapp to show the problem
patch on SecurityClassLoad

Description jfclere 2013-05-27 12:55:28 UTC
Created attachment 30328 [details]
Patch to fix the problem

With 2 JSP on including the other with <jsp:include page="blabla" flush="true"/>
you get:
java.lang.RuntimePermission accessClassInPackage.org.apache.coyote.http11 when calling the jsp the first time subsequent requests are working.
Comment 1 jfclere 2013-05-27 12:59:37 UTC
Created attachment 30329 [details]
Simple webapp to show the problem

extract jar in webapp
start tomcat
bin/catalina.sh start -security
curl -v curl -v http://localhost:8080/smtest/test.jsp
curl -v curl -v http://localhost:8080/smtest/test.jsp
Comment 2 jfclere 2013-05-28 11:41:57 UTC
Created attachment 30336 [details]
patch on SecurityClassLoad
Comment 3 Mark Thomas 2013-09-09 12:54:27 UTC
Patch applied to 6.0.x. This will be included in 6.0.38 onwards.