[WW-2857] SecurityException accessing theme.properites

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Not A Problem
• Fix Version/s: 2.1.3
• Assignee: Unassigned
• Reporter: Eddy Chan
• Created: 31/Oct/08 01:10
• Updated: 28/Oct/12 22:07
• Resolved: 15/Dec/08 22:57

Description

With WW-1368 (https://issues.apache.org/struts/browse/WW-1368), a bug is introduced when security is enabled as the file system path for the theme.properties file may not be within the webapp and thus, requires a FilePermission to access the invalid path. Therefore, there needs to be a catch for a SecurityException. The method of the call is in org.apache.struts2.components.template.BaseTemplateEngine.getThemeProps(Template) and the call is propFile.exists().