You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by jf...@apache.org on 2003/03/12 04:53:15 UTC

cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/session StandardSession.java

jfarcand    2003/03/11 19:53:15

  Modified:    catalina/src/share/org/apache/catalina/session
                        StandardSession.java
  Log:
  Forgot to commit this one. Add a doPrivileged block.
  
  Revision  Changes    Path
  1.14      +18 -6     jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/session/StandardSession.java
  
  Index: StandardSession.java
  ===================================================================
  RCS file: /home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/session/StandardSession.java,v
  retrieving revision 1.13
  retrieving revision 1.14
  diff -u -r1.13 -r1.14
  --- StandardSession.java	19 Feb 2003 00:33:27 -0000	1.13
  +++ StandardSession.java	12 Mar 2003 03:53:15 -0000	1.14
  @@ -73,7 +73,9 @@
   import java.io.ObjectOutputStream;
   import java.io.Serializable;
   import java.lang.reflect.Method;
  +import java.security.AccessController;
   import java.security.Principal;
  +import java.security.PrivilegedAction;
   import java.util.ArrayList;
   import java.util.Enumeration;
   import java.util.HashMap;
  @@ -551,8 +553,18 @@
        */
       public HttpSession getSession() {
   
  -        if (facade == null)
  -            facade = new StandardSessionFacade(this);
  +        if (facade == null){
  +            if (System.getSecurityManager() != null){
  +                final StandardSession fsession = this;
  +                facade = (StandardSessionFacade)AccessController.doPrivileged(new PrivilegedAction(){
  +                    public Object run(){
  +                        return new StandardSessionFacade(fsession);
  +                    }
  +                });
  +            } else {
  +                facade = new StandardSessionFacade(this);
  +            }
  +        }
           return (facade);
   
       }
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org