https://bugzilla.redhat.com/show_bug.cgi?id=1390515
--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- It was discovered that a malicious web application could bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
java-sig-commits@lists.fedoraproject.org