/* * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.jasper.security; /** * Static class used to preload java classes when using the * Java SecurityManager so that the defineClassInPackage * RuntimePermission does not trigger an AccessControlException. * * @author Jean-Francois Arcand */ public final class SecurityClassLoad { private static org.apache.juli.logging.Log log= org.apache.juli.logging.LogFactory.getLog( SecurityClassLoad.class ); public static void securityClassLoad(ClassLoader loader){ if( System.getSecurityManager() == null ){ return; } String basePackage = "org.apache.jasper."; try { loader.loadClass( basePackage + "runtime.JspFactoryImpl$PrivilegedGetPageContext"); loader.loadClass( basePackage + "runtime.JspFactoryImpl$PrivilegedReleasePageContext"); loader.loadClass( basePackage + "runtime.JspRuntimeLibrary"); loader.loadClass( basePackage + "runtime.ServletResponseWrapperInclude"); loader.loadClass( basePackage + "runtime.TagHandlerPool"); loader.loadClass( basePackage + "runtime.JspFragmentHelper"); loader.loadClass( basePackage + "runtime.ProtectedFunctionMapper"); loader.loadClass( basePackage + "runtime.PageContextImpl"); loader.loadClass( basePackage + "runtime.PageContextImpl$1"); loader.loadClass( basePackage + "runtime.PageContextImpl$2"); loader.loadClass( basePackage + "runtime.PageContextImpl$3"); loader.loadClass( basePackage + "runtime.PageContextImpl$4"); loader.loadClass( basePackage + "runtime.PageContextImpl$5"); loader.loadClass( basePackage + "runtime.PageContextImpl$6"); loader.loadClass( basePackage + "runtime.PageContextImpl$7"); loader.loadClass( basePackage + "runtime.PageContextImpl$8"); loader.loadClass( basePackage + "runtime.PageContextImpl$9"); loader.loadClass( basePackage + "runtime.PageContextImpl$10"); loader.loadClass( basePackage + "runtime.PageContextImpl$11"); loader.loadClass( basePackage + "runtime.PageContextImpl$12"); loader.loadClass( basePackage + "runtime.JspContextWrapper"); // Trigger loading of class and reading of property SecurityUtil.isPackageProtectionEnabled(); loader.loadClass( basePackage + "servlet.JspServletWrapper"); loader.loadClass( basePackage + "runtime.JspWriterImpl$1"); } catch (ClassNotFoundException ex) { log.error("SecurityClassLoad", ex); } } }