When using the new sessionAttributeValueClassNameFilter, apply the filter earlier rather than loading the class and then deciding to filter it out.
When a SecurityManager is used, enable filtering by default.

git-svn-id: https://svn.apache.org/repos/asf/tomcat/tc8.0.x/trunk@1726203 13f79535-47bb-0310-9956-ffa450edef68
8 files changed