You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2016/06/06 13:23:45 UTC

svn commit: r1746989 - in /tomcat/trunk: java/org/apache/jasper/compiler/TagLibraryInfoImpl.java java/org/apache/jasper/resources/LocalStrings.properties webapps/docs/changelog.xml

Author: markt
Date: Mon Jun  6 13:23:45 2016
New Revision: 1746989

URL: http://svn.apache.org/viewvc?rev=1746989&view=rev
Log:
Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=59654
Improve error message when attempting to use a TLD file from an invalid location.
Patch provided by Huxing Zhang.

Modified:
    tomcat/trunk/java/org/apache/jasper/compiler/TagLibraryInfoImpl.java
    tomcat/trunk/java/org/apache/jasper/resources/LocalStrings.properties
    tomcat/trunk/webapps/docs/changelog.xml

Modified: tomcat/trunk/java/org/apache/jasper/compiler/TagLibraryInfoImpl.java
URL: http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/jasper/compiler/TagLibraryInfoImpl.java?rev=1746989&r1=1746988&r2=1746989&view=diff
==============================================================================
--- tomcat/trunk/java/org/apache/jasper/compiler/TagLibraryInfoImpl.java (original)
+++ tomcat/trunk/java/org/apache/jasper/compiler/TagLibraryInfoImpl.java Mon Jun  6 13:23:45 2016
@@ -276,9 +276,11 @@ class TagLibraryInfoImpl extends TagLibr
                 err.jspError("jsp.error.tld.missing_jar", uri);
             }
             return new TldResourcePath(url, uri, "META-INF/taglib.tld");
-        } else {
-            return new TldResourcePath(url, uri);
+        } else if (uri.startsWith("/WEB-INF/lib/") || uri.startsWith("/WEB-INF/classes/") ||
+                (uri.startsWith("/WEB-INF/tags/") && uri.endsWith(".tld")&& !uri.endsWith("implicit.tld"))) {
+            err.jspError("jsp.error.tld.invalid_tld_file", uri);
         }
+        return new TldResourcePath(url, uri);
     }
 
     private TagInfo createTagInfo(TagXml tagXml) throws JasperException {

Modified: tomcat/trunk/java/org/apache/jasper/resources/LocalStrings.properties
URL: http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/jasper/resources/LocalStrings.properties?rev=1746989&r1=1746988&r2=1746989&view=diff
==============================================================================
--- tomcat/trunk/java/org/apache/jasper/resources/LocalStrings.properties (original)
+++ tomcat/trunk/java/org/apache/jasper/resources/LocalStrings.properties Mon Jun  6 13:23:45 2016
@@ -142,6 +142,7 @@ jsp.error.bad_attribute=Attribute {0} in
 jsp.error.tld.unable_to_get_jar=Unable to get JAR resource \"{0}\" containing TLD: {1}
 jsp.error.tld.missing=Unable to find taglib \"{0}\" for URI: {1}
 jsp.error.tld.missing_jar=Missing JAR resource \"{0}\" containing TLD
+jsp.error.tld.invalid_tld_file=Invalid tld file: \"{0}\", see JSP specification section 7.3.1 for more details
 jsp.error.unable.to_find_method=Unable to find setter method for attribute: {0}
 jsp.error.bad_tag=No tag \"{0}\" defined in tag library imported with prefix \"{1}\"
 jsp.error.xml.bad_tag=No tag \"{0}\" defined in tag library associated with uri \"{1}\"

Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1746989&r1=1746988&r2=1746989&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Mon Jun  6 13:23:45 2016
@@ -131,6 +131,10 @@
         the class loader of the first web application to use expressions to be
         pinned in memory. (markt)
       </fix>
+      <fix>
+        <bug>59654</bug>: Improve error message when attempting to use a TLD
+        file from an invalid location. Patch provided by Huxing Zhang. (markt)
+      </fix>
     </changelog>
   </subsection>
   <subsection name="Web applications">



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org