Thank you for the quick response. We can upgrade Tomcat to the latest version.
Is there anything required in tomcat installation's configuration to support JSP compilation ? If yes, please share the details. Regards, Pavan On Mon, Jun 13, 2022 at 3:35 PM Olaf Kock <tom...@olafkock.de> wrote: > > On 13.06.22 11:48, Pavan Kumar Tiruvaipati wrote: > > Hi, > > > > Our application is running on Tomcat 6.0.45. > > > > > > *Operation System* - Linux & Windows > > > > Due to security reasons, we are replacing JDK 1.8 with JRE 1.8. > > If you make a change *for security reasons*, you might want to rather > update Tomcat to a version that was release after February 2016, that > hasn't reached its end-of life in December 2016 > (https://tomcat.apache.org/tomcat-60-eol.html). > > In general: Yes, Tomcat bundles the eclipse compiler since version 5.5 - > if you really want to make this small step, you might want to post more > information about your particular configuration - e.g. compare your > current installation's configuration with a stock 6.0.45 download. If > you look at a diff between the two, you might see already, what you'd > need to change. > > I'd recommend to go with a more current version of Tomcat though - > specifically as you state security reasons for your upgrade. As you > still would compile JSPs, no matter if you use eclipse's or your JDK's > compiler, I don't see a lot of potential security issues being > eliminated by the upgrade that you're planning. Looking at security > fixes in Tomcat since February 2016 likely reveals some issues that > might be a lot easier to exploit. > > Olaf > > > > > We understand that Tomcat is bundled with Eclipse JDT compiler - > > ecj-4.3.1.jar. > > > > It will take care of dynamic compilation of JSP pages (Correct me if I'm > > wrong) > > > > But It's unable to recompile JSP pages without JDK. > > > > > > Does Tomcat 6.0.45 or any higher version require JDK to compile JSP > pages ? > > > > Please let us know if you need any more information. > > > > > > Regards, > > > > Pavan > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
