[jira] Updated: (WINK-228) sweep code for java2security compatibility

["Mike Rheinheimer (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/WINK-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mike Rheinheimer updated WINK-228:
----------------------------------

    Description: 
Was just thinking about the problems java2security may introduce regarding WINK-226 and WINK-227.  The places fixed in these two Jiras probably need to be wrapped in doPrivs.

Perhaps we'd be better off having our own ClassUtils implementation so we can manage the loadClass utility method

{code}
doPriv {
    try {
        use thread context classloader to load class
    } catch (ClassNotFoundException cnfe) {
        use system classloader to load class
    }
}
{code}

  was:
Was just thinking about the problems java2security may introduce regarding WINK-226 and WINK-227.  The places fixed in these two Jiras probably need to be wrapped in doPrivs.

Perhaps we'd be better off having our own ClassUtils implementation so we can manage the loadClass utility method

doPriv {
    try {
        use thread context classloader to load class
    } catch (ClassNotFoundException cnfe) {
        use system classloader to load class
    }
}


> sweep code for java2security compatibility
> ------------------------------------------
>
>                 Key: WINK-228
>                 URL: https://issues.apache.org/jira/browse/WINK-228
>             Project: Wink
>          Issue Type: Bug
>    Affects Versions: 1.1
>            Reporter: Mike Rheinheimer
>             Fix For: 1.1
>
>
> Was just thinking about the problems java2security may introduce regarding WINK-226 and WINK-227.  The places fixed in these two Jiras probably need to be wrapped in doPrivs.
> Perhaps we'd be better off having our own ClassUtils implementation so we can manage the loadClass utility method
> {code}
> doPriv {
>     try {
>         use thread context classloader to load class
>     } catch (ClassNotFoundException cnfe) {
>         use system classloader to load class
>     }
> }
> {code}

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.