| /* |
| * Licensed to the Apache Software Foundation (ASF) under one or more |
| * contributor license agreements. See the NOTICE file distributed with |
| * this work for additional information regarding copyright ownership. |
| * The ASF licenses this file to You under the Apache License, Version 2.0 |
| * (the "License"); you may not use this file except in compliance with |
| * the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| |
| package org.apache.jasper.security; |
| |
| /** |
| * Static class used to preload java classes when using the |
| * Java SecurityManager so that the defineClassInPackage |
| * RuntimePermission does not trigger an AccessControlException. |
| * |
| * @author Jean-Francois Arcand |
| */ |
| |
| public final class SecurityClassLoad { |
| |
| private static final org.apache.juli.logging.Log log= |
| org.apache.juli.logging.LogFactory.getLog( SecurityClassLoad.class ); |
| |
| public static void securityClassLoad(ClassLoader loader){ |
| |
| if( System.getSecurityManager() == null ){ |
| return; |
| } |
| |
| final String basePackage = "org.apache.jasper."; |
| try { |
| loader.loadClass( basePackage + |
| "runtime.JspFactoryImpl$PrivilegedGetPageContext"); |
| loader.loadClass( basePackage + |
| "runtime.JspFactoryImpl$PrivilegedReleasePageContext"); |
| |
| loader.loadClass( basePackage + |
| "runtime.JspRuntimeLibrary"); |
| loader.loadClass( basePackage + |
| "runtime.JspRuntimeLibrary$PrivilegedIntrospectHelper"); |
| |
| loader.loadClass( basePackage + |
| "runtime.ServletResponseWrapperInclude"); |
| loader.loadClass( basePackage + |
| "runtime.TagHandlerPool"); |
| loader.loadClass( basePackage + |
| "runtime.JspFragmentHelper"); |
| |
| loader.loadClass( basePackage + |
| "runtime.ProtectedFunctionMapper"); |
| loader.loadClass( basePackage + |
| "runtime.ProtectedFunctionMapper$1"); |
| loader.loadClass( basePackage + |
| "runtime.ProtectedFunctionMapper$2"); |
| loader.loadClass( basePackage + |
| "runtime.ProtectedFunctionMapper$3"); |
| loader.loadClass( basePackage + |
| "runtime.ProtectedFunctionMapper$4"); |
| |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$1"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$2"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$3"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$4"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$5"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$6"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$7"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$8"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$9"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$10"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$11"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$12"); |
| loader.loadClass( basePackage + |
| "runtime.PageContextImpl$13"); |
| |
| loader.loadClass( basePackage + |
| "runtime.JspContextWrapper"); |
| |
| // Trigger loading of class and reading of property |
| SecurityUtil.isPackageProtectionEnabled(); |
| |
| loader.loadClass( basePackage + |
| "servlet.JspServletWrapper"); |
| |
| loader.loadClass( basePackage + |
| "runtime.JspWriterImpl$1"); |
| } catch (ClassNotFoundException ex) { |
| log.error("SecurityClassLoad", ex); |
| } |
| } |
| } |