[3.3] Is methodo.a.c.http11.Http11Processor.addFilter used

[Jean-Francois Arcand <jf...@apache.org>]

Hi,

is method o.a.c.http11.Http11Processor.addFilter used by Tomcat 3.x? The 
method is not used in 4.1.X and 5, and I would like to remove it. The 
method gives direct access to Class.forName, and this is a "lightweight" 
security issue.

Thanks,

-- Jeanfrancois


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Re: [3.3] Is methodo.a.c.http11.Http11Processor.addFilter used

[Bill Barker <wb...@wilshire.com>]

It's not called by 3.3.  Like everybody else, 3.3 doesn't know anything
about o.a.c.http.**.

----- Original Message -----
From: "Jean-Francois Arcand" <jf...@apache.org>
To: "Tomcat Developers List" <to...@jakarta.apache.org>
Sent: Tuesday, October 22, 2002 2:46 PM
Subject: [3.3] Is methodo.a.c.http11.Http11Processor.addFilter used


> Hi,
>
> is method o.a.c.http11.Http11Processor.addFilter used by Tomcat 3.x? The
> method is not used in 4.1.X and 5, and I would like to remove it. The
> method gives direct access to Class.forName, and this is a "lightweight"
> security issue.
>
> Thanks,
>
> -- Jeanfrancois
>
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>
>


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>