LogFactoryImpl.java - SecurityException

[Token Scotsman <to...@hotmail.com>]

Hi.

Would it be possible for someone to change file LogFactoryImpl.java?
It currently has:
        } catch (SecurityException e) {
        }
And it might be better if it had:
        } catch (SecurityException e) {
                logClassName = LOG_DEFAULT;
        }

This would prevent null being passed to loadClass().

Hope people think this is a good idea.

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Re: LogFactoryImpl.java - SecurityException

[Juozas Baliuka <ba...@mwm.lt>]

Hi,
I does not work on this project, but I think it is not the best idea to set
default logger on security exeption.
It will be very dificult to find a problem and grant requred permissions or
to dissable logging if app does not have permissions for logging.
The most *secure* way not to catch SecurityException at all, or
rethrow it. It must be not a problem because it is Runtime exception.


> Hi.
>
> Would it be possible for someone to change file LogFactoryImpl.java?
> It currently has:
>         } catch (SecurityException e) {
>         }
> And it might be better if it had:
>         } catch (SecurityException e) {
>                 logClassName = LOG_DEFAULT;
>         }
>
> This would prevent null being passed to loadClass().
>
> Hope people think this is a good idea.
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.
>
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>