Fix 65332 - javac permissions with Java 9 onwards for JSPs
https://bz.apache.org/bugzilla/show_bug.cgi?id=65332
diff --git a/conf/catalina.policy b/conf/catalina.policy
index 2e6f8df..91b7c83 100644
--- a/conf/catalina.policy
+++ b/conf/catalina.policy
@@ -50,10 +50,15 @@
permission java.security.AllPermission;
};
+// This permission is required when using javac to compile JSPs on Java 9
+// onwards
+//grant codeBase "jrt:/jdk.compiler" {
+// permission java.security.AllPermission;
+//};
+
// ========== CATALINA CODE PERMISSIONS =======================================
-
// These permissions apply to the daemon code
grant codeBase "file:${catalina.home}/bin/commons-daemon.jar" {
permission java.security.AllPermission;
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 47af7b8..1ea53e9 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -230,6 +230,13 @@
parameters, the method that requires the fewest varargs is preferred.
(markt)
</fix>
+ <add>
+ <bug>65332</bug>: Add a commented out section in
+ <code>catalina.policy</code> that provides the necessary permissions to
+ compile JSPs with javac when running on Java 9 onwards with a security
+ manager. It is commented out as it will cause errors if used with
+ earlier Java versions. (markt)
+ </add>
</changelog>
</subsection>
<subsection name="WebSocket">
