Jasper fails to initialize when running with SecurityManager enabled
https://bz.apache.org/bugzilla/show_bug.cgi?id=60101

Because Jasper doesn't initialize you can't load/use any JSPs. Tomcat7 returns a 500 when you try and call a JSP, but tomcat8 fails to even deploy webapps containing JSPs.

This regression was introduced by the fix for CVE-2016-5018 (JWS-569).

tomcat7:
http://svn.apache.org/r1760309

tomcat8:
http://svn.apache.org/r1760307