Details
Description
PolicyContext.setHandlerData() sets a given object on the thread. In Geronimo Jetty and Tomcat code this is called to set the HttpServletRequest object as the policy handler data. The problem is, that there is no call to unset the handler data object from the thread. That causes the HttpServletRequest objects (and its references) to stay in memory longer then necessary.