Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
2.0.4
-
None
Description
In org.apache.tiles.access.TilesAccess.get/set/removeAttribute, instead of using reflection to call the methods, cast the context object to a ServletContext and then call the methods directly. This reduces the chance of having a SecurityException occur, since the ServletContext interface for these methods are public, but the specific context may not be reflectable.
Attachments
Issue Links
- depends upon
-
TILES-334 TilesApplicationContext should be created outside of container creation
- Closed
-
TILES-330 Separate TilesContextFactory into TilesApplicationContextFactory and TilesRequestContextFactory
- Closed
- relates to
-
TILES-334 TilesApplicationContext should be created outside of container creation
- Closed