Project: Tomcat
Bug 44282 WebappClassLoader.findClass calls getClassLoader without privileges
Reported: 2008-01-22 23:50:47 | Status: resolved fixed

When logging is in TRACE mode or lower, org.apache.catalina.loader.WebappClassLoader.findClass(String) calls getClassLoader() without a privileged block. With security enabled, this will cause a SecurityException if the RuntimePermission to getClassLoader is not granted.

Files changed in fix:
java/org/apache/catalina/loader/WebappClassLoader.java