[TILES-324] Cannot call ClassUtil.setContextClassLoader() with SecurityManager

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.6
• Fix Version/s: 2.0.7, 2.1.1
• Component/s: tiles-core
• Assignee: Antonio Petrelli
• Reporter: Eddy Chan
• Created: 25/Oct/08 00:51
• Updated: 17/Apr/09 21:28
• Resolved: 29/Oct/08 13:38

Description

In org.apache.tiles.util.ClassUtil.instantiate(String, boolean), there are two calls to setContextClassLoader for the currentThread. This causes an issue with a SecurityManager that does not grant the RuntimePermission. In my situation, since this class is in the webapp, the second call to setContextClassLoader causes an issue, since it is in the finally clause. Two workarounds:

1) Remove the calls to setContextClassLoader. (Not sure the necessity here.)
2) Flag whether the first call to setContextClassLoader was originally done, and then conditionally call setContextClassLoader if it was done.

Issue Links

• is duplicated by: TILES-401 Support Tiles in Google App Engine