-
Bug
-
Resolution: Done
-
Major
-
7.0.0.ER6
-
None
Some source codes contain wrong static call for permission check
AccessController.checkPermission(...);
There must be some like this
securityManagerInstance.checkPermission(...);
https://github.com/undertow-io/undertow/blob/master/websockets-jsr/src/main/java/io/undertow/websockets/jsr/UndertowContainerProvider.java#L105
Lines 105, 112, 126
https://github.com/undertow-io/undertow/blob/7db20bdef6cea603b5df9066506e40c8143f109a/servlet/src/main/java/io/undertow/servlet/spec/HttpSessionImpl.java#L216
Line 216
https://github.com/undertow-io/undertow/blob/95051a890cbf655631f26813180fab5c31aa954b/servlet/src/main/java/io/undertow/servlet/handlers/ServletInitialHandler.java#L109
Line 109
https://github.com/undertow-io/undertow/blob/909b972ec3a57555a2b769cec918f3d69a7a4502/servlet/src/main/java/io/undertow/servlet/handlers/ServletRequestContext.java#L64
Lines 64, 71,78, 89
https://github.com/undertow-io/undertow/blob/efb2eb38839473938ab090afb0e8b2781408c783/core/src/main/java/io/undertow/server/HttpServerExchange.java#L1742
Line 1742
- is cloned by
-
-
- Resolved
-
