tweed5-commons-logging

Go to file

Simon Kitching 6bad2dd657 * INCOMPATIBLE CHANGE (minor): protected method getContextClassloader no longer uses an AccessController.

This was a (minor) security flaw. Instead, behaviour is reverted to pre-1.1 behaviour where no
AccessController is used, and a new private method getContextClassloaderInternal has been created. The
chance of breaking valid user code is extremely small here. Note that this forces subclass LogFactoryImpl
to provide its own copy of getContextClassloaderInternal, as the parent no longer exposes the (restricted)
context classloader object.
* Get system properties using an AccessController so they are accessable by a trusted JCL lib called
from untrusted code.
* Revert recent patch to run entire static initializer under an AccessController, as the chances of
creating a security flaw are too high. The specific problem this patch was intended to fix has been
addressed by fetching specific system properties via an AccessController.


git-svn-id: https://svn.apache.org/repos/asf/jakarta/commons/proper/logging/trunk@424063 13f79535-47bb-0310-9956-ffa450edef68

2006-07-20 21:06:09 +00:00

src

* INCOMPATIBLE CHANGE (minor): protected method getContextClassloader no longer uses an AccessController.

2006-07-20 21:06:09 +00:00

xdocs

Correct Jira --> JIRA

2006-07-15 01:17:37 +00:00

build.properties.sample

Added some notes about how to use the build.properties.sample file.

2006-05-04 21:39:21 +00:00

build.xml

Updated to next SNAPSHOT