Add the StatusManagerServlet to the list of Servlets that can only be…

… loaded by privileged applications. git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1722799 13f79535-47bb-0310-9956-ffa450edef68
apache · Jan 4, 2016 · c8601f8 · c8601f8
1 parent 4a70190
commit c8601f8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/java/org/apache/catalina/core/RestrictedServlets.properties b/java/org/apache/catalina/core/RestrictedServlets.properties
@@ -16,3 +16,4 @@
 org.apache.catalina.ssi.SSIServlet=restricted
 org.apache.catalina.servlets.CGIServlet=restricted
 org.apache.catalina.manager.JMXProxyServlet=restricted
+org.apache.catalina.manager.StatusManagerServlet=restricted
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
@@ -155,6 +155,10 @@
         header to the <code>HttpHeaderSecurityFilter</code>. Patch provided by
         Jacopo Cappellato. (markt)
       </fix>
+      <fix>
+        Add the <code>StatusManagerServlet</code> to the list of Servlets that
+        can only be loaded by privileged applications. (markt)
+      </fix>
     </changelog>
   </subsection>
   <subsection name="Coyote">