Re: [Tomcat 3.2 Issue] Security Constraints on RequestDispatcher Calls

2000-11-04 Thread Hans Bergsten
"Craig R. McClanahan" wrote: > [...] > This kind of function re-use makes sense -- however, it has a disturbing > implication in this case. The implementation of processRequest() calls > the contextMap() and requestMap() methods of all configured request > interceptors. This means (among other t

[Tomcat 3.2 Issue] Security Constraints on RequestDispatcher Calls

2000-11-04 Thread Craig R. McClanahan
While researching the isues related to BugRat Bug Report #213 ("RequestDispatcher does not propogate errors"), I became aware that, in the implementation of RequestDispatcher.forward() and RequestDispatcher.include(), (org.apache.tomcat.facade.RequestDispatcherImpl) the method ContextManager.proce