public class org.apache.tomcat.util.descriptor.web.SecurityConstraint extends org.apache.tomcat.util.descriptor.web.XmlEncodingBase implements java.io.Serializable
minor version: 0
major version: 59
flags: flags: (0x0021) ACC_PUBLIC, ACC_SUPER
this_class: org.apache.tomcat.util.descriptor.web.SecurityConstraint
super_class: org.apache.tomcat.util.descriptor.web.XmlEncodingBase
{
private static final long serialVersionUID;
descriptor: J
flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
ConstantValue: 1
public static final java.lang.String ROLE_ALL_ROLES;
descriptor: Ljava/lang/String;
flags: (0x0019) ACC_PUBLIC, ACC_STATIC, ACC_FINAL
ConstantValue: "*"
public static final java.lang.String ROLE_ALL_AUTHENTICATED_USERS;
descriptor: Ljava/lang/String;
flags: (0x0019) ACC_PUBLIC, ACC_STATIC, ACC_FINAL
ConstantValue: "**"
private static final org.apache.tomcat.util.res.StringManager sm;
descriptor: Lorg/apache/tomcat/util/res/StringManager;
flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
private boolean allRoles;
descriptor: Z
flags: (0x0002) ACC_PRIVATE
private boolean authenticatedUsers;
descriptor: Z
flags: (0x0002) ACC_PRIVATE
private boolean authConstraint;
descriptor: Z
flags: (0x0002) ACC_PRIVATE
private java.lang.String[] authRoles;
descriptor: [Ljava/lang/String;
flags: (0x0002) ACC_PRIVATE
private org.apache.tomcat.util.descriptor.web.SecurityCollection[] collections;
descriptor: [Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
flags: (0x0002) ACC_PRIVATE
private java.lang.String displayName;
descriptor: Ljava/lang/String;
flags: (0x0002) ACC_PRIVATE
private java.lang.String userConstraint;
descriptor: Ljava/lang/String;
flags: (0x0002) ACC_PRIVATE
static void <clinit>();
descriptor: ()V
flags: (0x0008) ACC_STATIC
Code:
stack=1, locals=0, args_size=0
0: getstatic org.apache.tomcat.util.descriptor.web.Constants.PACKAGE_NAME:Ljava/lang/String;
invokestatic org.apache.tomcat.util.res.StringManager.getManager:(Ljava/lang/String;)Lorg/apache/tomcat/util/res/StringManager;
1: putstatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.sm:Lorg/apache/tomcat/util/res/StringManager;
2: return
LocalVariableTable:
Start End Slot Name Signature
public void <init>();
descriptor: ()V
flags: (0x0001) ACC_PUBLIC
Code:
stack=2, locals=1, args_size=1
start local 0 0: aload 0
invokespecial org.apache.tomcat.util.descriptor.web.XmlEncodingBase.<init>:()V
1: aload 0
iconst_0
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.allRoles:Z
2: aload 0
iconst_0
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authenticatedUsers:Z
3: aload 0
iconst_0
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authConstraint:Z
4: aload 0
iconst_0
anewarray java.lang.String
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
5: aload 0
iconst_0
anewarray org.apache.tomcat.util.descriptor.web.SecurityCollection
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
6: aload 0
aconst_null
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.displayName:Ljava/lang/String;
7: aload 0
ldc "NONE"
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.userConstraint:Ljava/lang/String;
8: return
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 9 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public boolean getAllRoles();
descriptor: ()Z
flags: (0x0001) ACC_PUBLIC
Code:
stack=1, locals=1, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.allRoles:Z
ireturn
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 1 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public boolean getAuthenticatedUsers();
descriptor: ()Z
flags: (0x0001) ACC_PUBLIC
Code:
stack=1, locals=1, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authenticatedUsers:Z
ireturn
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 1 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public boolean getAuthConstraint();
descriptor: ()Z
flags: (0x0001) ACC_PUBLIC
Code:
stack=1, locals=1, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authConstraint:Z
ireturn
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 1 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public void setAuthConstraint(boolean);
descriptor: (Z)V
flags: (0x0001) ACC_PUBLIC
Code:
stack=2, locals=2, args_size=2
start local 0 start local 1 0: aload 0
iload 1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authConstraint:Z
1: return
end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 2 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 2 1 authConstraint Z
MethodParameters:
Name Flags
authConstraint
public java.lang.String getDisplayName();
descriptor: ()Ljava/lang/String;
flags: (0x0001) ACC_PUBLIC
Code:
stack=1, locals=1, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.displayName:Ljava/lang/String;
areturn
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 1 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public void setDisplayName(java.lang.String);
descriptor: (Ljava/lang/String;)V
flags: (0x0001) ACC_PUBLIC
Code:
stack=2, locals=2, args_size=2
start local 0 start local 1 0: aload 0
aload 1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.displayName:Ljava/lang/String;
1: return
end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 2 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 2 1 displayName Ljava/lang/String;
MethodParameters:
Name Flags
displayName
public java.lang.String getUserConstraint();
descriptor: ()Ljava/lang/String;
flags: (0x0001) ACC_PUBLIC
Code:
stack=1, locals=1, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.userConstraint:Ljava/lang/String;
areturn
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 1 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public void setUserConstraint(java.lang.String);
descriptor: (Ljava/lang/String;)V
flags: (0x0001) ACC_PUBLIC
Code:
stack=2, locals=2, args_size=2
start local 0 start local 1 0: aload 1
ifnull 2
1: aload 0
aload 1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.userConstraint:Ljava/lang/String;
2: StackMap locals:
StackMap stack:
return
end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 3 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 3 1 userConstraint Ljava/lang/String;
MethodParameters:
Name Flags
userConstraint
public void treatAllAuthenticatedUsersAsApplicationRole();
descriptor: ()V
flags: (0x0001) ACC_PUBLIC
Code:
stack=3, locals=2, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authenticatedUsers:Z
ifeq 6
1: aload 0
iconst_0
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authenticatedUsers:Z
2: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
iconst_1
iadd
invokestatic java.util.Arrays.copyOf:([Ljava/lang/Object;I)[Ljava/lang/Object;
checkcast java.lang.String[]
astore 1
start local 1 3: aload 1
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
ldc "**"
aastore
4: aload 0
aload 1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
5: aload 0
iconst_1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authConstraint:Z
end local 1 6: StackMap locals:
StackMap stack:
return
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 7 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
3 6 1 results [Ljava/lang/String;
public void addAuthRole(java.lang.String);
descriptor: (Ljava/lang/String;)V
flags: (0x0001) ACC_PUBLIC
Code:
stack=3, locals=3, args_size=2
start local 0 start local 1 0: aload 1
ifnonnull 2
1: return
2: StackMap locals:
StackMap stack:
ldc "*"
aload 1
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 5
3: aload 0
iconst_1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.allRoles:Z
4: return
5: StackMap locals:
StackMap stack:
ldc "**"
aload 1
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 8
6: aload 0
iconst_1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authenticatedUsers:Z
7: return
8: StackMap locals:
StackMap stack:
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
iconst_1
iadd
invokestatic java.util.Arrays.copyOf:([Ljava/lang/Object;I)[Ljava/lang/Object;
checkcast java.lang.String[]
astore 2
start local 2 9: aload 2
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
aload 1
aastore
10: aload 0
aload 2
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
11: aload 0
iconst_1
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authConstraint:Z
12: return
end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 13 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 13 1 authRole Ljava/lang/String;
9 13 2 results [Ljava/lang/String;
MethodParameters:
Name Flags
authRole
public void addCollection(org.apache.tomcat.util.descriptor.web.SecurityCollection);
descriptor: (Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;)V
flags: (0x0001) ACC_PUBLIC
Code:
stack=3, locals=3, args_size=2
start local 0 start local 1 0: aload 1
ifnonnull 2
1: return
2: StackMap locals:
StackMap stack:
aload 1
aload 0
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.getCharset:()Ljava/nio/charset/Charset;
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.setCharset:(Ljava/nio/charset/Charset;)V
3: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
iconst_1
iadd
invokestatic java.util.Arrays.copyOf:([Ljava/lang/Object;I)[Ljava/lang/Object;
checkcast org.apache.tomcat.util.descriptor.web.SecurityCollection[]
astore 2
start local 2 4: aload 2
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
aload 1
aastore
5: aload 0
aload 2
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
6: return
end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 7 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 7 1 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
4 7 2 results [Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
MethodParameters:
Name Flags
collection
public boolean findAuthRole(java.lang.String);
descriptor: (Ljava/lang/String;)Z
flags: (0x0001) ACC_PUBLIC
Code:
stack=3, locals=3, args_size=2
start local 0 start local 1 0: aload 1
ifnonnull 2
1: iconst_0
ireturn
2: StackMap locals:
StackMap stack:
iconst_0
istore 2
start local 2 3: goto 7
4: StackMap locals: int
StackMap stack:
aload 1
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
iload 2
aaload
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 6
5: iconst_1
ireturn
6: StackMap locals:
StackMap stack:
iinc 2 1
StackMap locals:
StackMap stack:
7: iload 2
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
if_icmplt 4
end local 2 8: iconst_0
ireturn
end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 9 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 9 1 role Ljava/lang/String;
3 8 2 i I
MethodParameters:
Name Flags
role
public java.lang.String[] findAuthRoles();
descriptor: ()[Ljava/lang/String;
flags: (0x0001) ACC_PUBLIC
Code:
stack=1, locals=1, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
areturn
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 1 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public org.apache.tomcat.util.descriptor.web.SecurityCollection findCollection(java.lang.String);
descriptor: (Ljava/lang/String;)Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
flags: (0x0001) ACC_PUBLIC
Code:
stack=3, locals=3, args_size=2
start local 0 start local 1 0: aload 1
ifnonnull 2
1: aconst_null
areturn
2: StackMap locals:
StackMap stack:
iconst_0
istore 2
start local 2 3: goto 7
4: StackMap locals: int
StackMap stack:
aload 1
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iload 2
aaload
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.getName:()Ljava/lang/String;
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 6
5: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iload 2
aaload
areturn
6: StackMap locals:
StackMap stack:
iinc 2 1
StackMap locals:
StackMap stack:
7: iload 2
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
if_icmplt 4
end local 2 8: aconst_null
areturn
end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 9 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 9 1 name Ljava/lang/String;
3 8 2 i I
MethodParameters:
Name Flags
name
public org.apache.tomcat.util.descriptor.web.SecurityCollection[] findCollections();
descriptor: ()[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
flags: (0x0001) ACC_PUBLIC
Code:
stack=1, locals=1, args_size=1
start local 0 0: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
areturn
end local 0 LocalVariableTable:
Start End Slot Name Signature
0 1 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
public boolean included(java.lang.String, java.lang.String);
descriptor: (Ljava/lang/String;Ljava/lang/String;)Z
flags: (0x0001) ACC_PUBLIC
Code:
stack=4, locals=6, args_size=3
start local 0 start local 1 start local 2 0: aload 2
ifnonnull 2
1: iconst_0
ireturn
2: StackMap locals:
StackMap stack:
iconst_0
istore 3
start local 3 3: goto 14
4: StackMap locals: int
StackMap stack:
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iload 3
aaload
aload 2
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.findMethod:(Ljava/lang/String;)Z
ifne 6
5: goto 13
6: StackMap locals:
StackMap stack:
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iload 3
aaload
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.findPatterns:()[Ljava/lang/String;
astore 4
start local 4 7: iconst_0
istore 5
start local 5 8: goto 12
9: StackMap locals: java.lang.String[] int
StackMap stack:
aload 0
aload 1
aload 4
iload 5
aaload
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.matchPattern:(Ljava/lang/String;Ljava/lang/String;)Z
ifeq 11
10: iconst_1
ireturn
11: StackMap locals:
StackMap stack:
iinc 5 1
StackMap locals:
StackMap stack:
12: iload 5
aload 4
arraylength
if_icmplt 9
end local 5 end local 4 13: StackMap locals:
StackMap stack:
iinc 3 1
StackMap locals:
StackMap stack:
14: iload 3
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
if_icmplt 4
end local 3 15: iconst_0
ireturn
end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 16 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 16 1 uri Ljava/lang/String;
0 16 2 method Ljava/lang/String;
3 15 3 i I
7 13 4 patterns [Ljava/lang/String;
8 13 5 j I
MethodParameters:
Name Flags
uri
method
public void removeAuthRole(java.lang.String);
descriptor: (Ljava/lang/String;)V
flags: (0x0001) ACC_PUBLIC
Code:
stack=4, locals=6, args_size=2
start local 0 start local 1 0: aload 1
ifnonnull 2
1: return
2: StackMap locals:
StackMap stack:
ldc "*"
aload 1
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 5
3: aload 0
iconst_0
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.allRoles:Z
4: return
5: StackMap locals:
StackMap stack:
ldc "**"
aload 1
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 8
6: aload 0
iconst_0
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authenticatedUsers:Z
7: return
8: StackMap locals:
StackMap stack:
iconst_m1
istore 2
start local 2 9: iconst_0
istore 3
start local 3 10: goto 15
11: StackMap locals: int int
StackMap stack:
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
iload 3
aaload
aload 1
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 14
12: iload 3
istore 2
13: goto 16
14: StackMap locals:
StackMap stack:
iinc 3 1
StackMap locals:
StackMap stack:
15: iload 3
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
if_icmplt 11
end local 3 16: StackMap locals:
StackMap stack:
iload 2
iflt 26
17: iconst_0
istore 3
start local 3 18: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
iconst_1
isub
anewarray java.lang.String
astore 4
start local 4 19: iconst_0
istore 5
start local 5 20: goto 24
21: StackMap locals: int java.lang.String[] int
StackMap stack:
iload 5
iload 2
if_icmpeq 23
22: aload 4
iload 3
iinc 3 1
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
iload 5
aaload
aastore
23: StackMap locals:
StackMap stack:
iinc 5 1
StackMap locals:
StackMap stack:
24: iload 5
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
arraylength
if_icmplt 21
end local 5 25: aload 0
aload 4
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.authRoles:[Ljava/lang/String;
end local 4 end local 3 26: StackMap locals:
StackMap stack:
return
end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 27 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 27 1 authRole Ljava/lang/String;
9 27 2 n I
10 16 3 i I
18 26 3 j I
19 26 4 results [Ljava/lang/String;
20 25 5 i I
MethodParameters:
Name Flags
authRole
public void removeCollection(org.apache.tomcat.util.descriptor.web.SecurityCollection);
descriptor: (Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;)V
flags: (0x0001) ACC_PUBLIC
Code:
stack=4, locals=6, args_size=2
start local 0 start local 1 0: aload 1
ifnonnull 2
1: return
2: StackMap locals:
StackMap stack:
iconst_m1
istore 2
start local 2 3: iconst_0
istore 3
start local 3 4: goto 9
5: StackMap locals: int int
StackMap stack:
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iload 3
aaload
aload 1
invokevirtual java.lang.Object.equals:(Ljava/lang/Object;)Z
ifeq 8
6: iload 3
istore 2
7: goto 10
8: StackMap locals:
StackMap stack:
iinc 3 1
StackMap locals:
StackMap stack:
9: iload 3
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
if_icmplt 5
end local 3 10: StackMap locals:
StackMap stack:
iload 2
iflt 21
11: iconst_0
istore 3
start local 3 12: aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
iconst_1
isub
anewarray org.apache.tomcat.util.descriptor.web.SecurityCollection
13: astore 4
start local 4 14: iconst_0
istore 5
start local 5 15: goto 19
16: StackMap locals: int org.apache.tomcat.util.descriptor.web.SecurityCollection[] int
StackMap stack:
iload 5
iload 2
if_icmpeq 18
17: aload 4
iload 3
iinc 3 1
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iload 5
aaload
aastore
18: StackMap locals:
StackMap stack:
iinc 5 1
StackMap locals:
StackMap stack:
19: iload 5
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
if_icmplt 16
end local 5 20: aload 0
aload 4
putfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
end local 4 end local 3 21: StackMap locals:
StackMap stack:
return
end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 22 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 22 1 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
3 22 2 n I
4 10 3 i I
12 21 3 j I
14 21 4 results [Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
15 20 5 i I
MethodParameters:
Name Flags
collection
public java.lang.String toString();
descriptor: ()Ljava/lang/String;
flags: (0x0001) ACC_PUBLIC
Code:
stack=3, locals=3, args_size=1
start local 0 0: new java.lang.StringBuilder
dup
ldc "SecurityConstraint["
invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
astore 1
start local 1 1: iconst_0
istore 2
start local 2 2: goto 7
3: StackMap locals: java.lang.StringBuilder int
StackMap stack:
iload 2
ifle 5
4: aload 1
ldc ", "
invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
pop
5: StackMap locals:
StackMap stack:
aload 1
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iload 2
aaload
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.getName:()Ljava/lang/String;
invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
pop
6: iinc 2 1
StackMap locals:
StackMap stack:
7: iload 2
aload 0
getfield org.apache.tomcat.util.descriptor.web.SecurityConstraint.collections:[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
arraylength
if_icmplt 3
end local 2 8: aload 1
ldc "]"
invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
pop
9: aload 1
invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
areturn
end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 10 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
1 10 1 sb Ljava/lang/StringBuilder;
2 8 2 i I
private boolean matchPattern(java.lang.String, java.lang.String);
descriptor: (Ljava/lang/String;Ljava/lang/String;)Z
flags: (0x0002) ACC_PRIVATE
Code:
stack=4, locals=5, args_size=3
start local 0 start local 1 start local 2 0: aload 1
ifnull 1
aload 1
invokevirtual java.lang.String.length:()I
ifne 2
1: StackMap locals:
StackMap stack:
ldc "/"
astore 1
2: StackMap locals:
StackMap stack:
aload 2
ifnull 3
aload 2
invokevirtual java.lang.String.length:()I
ifne 4
3: StackMap locals:
StackMap stack:
ldc "/"
astore 2
4: StackMap locals:
StackMap stack:
aload 1
aload 2
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 6
5: iconst_1
ireturn
6: StackMap locals:
StackMap stack:
aload 2
ldc "/"
invokevirtual java.lang.String.startsWith:(Ljava/lang/String;)Z
ifeq 20
aload 2
ldc "/*"
invokevirtual java.lang.String.endsWith:(Ljava/lang/String;)Z
ifeq 20
7: aload 2
iconst_0
aload 2
invokevirtual java.lang.String.length:()I
iconst_2
isub
invokevirtual java.lang.String.substring:(II)Ljava/lang/String;
astore 2
8: aload 2
invokevirtual java.lang.String.length:()I
ifne 10
9: iconst_1
ireturn
10: StackMap locals:
StackMap stack:
aload 1
ldc "/"
invokevirtual java.lang.String.endsWith:(Ljava/lang/String;)Z
ifeq 12
11: aload 1
iconst_0
aload 1
invokevirtual java.lang.String.length:()I
iconst_1
isub
invokevirtual java.lang.String.substring:(II)Ljava/lang/String;
astore 1
12: StackMap locals:
StackMap stack:
aload 2
aload 1
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 14
13: iconst_1
ireturn
14: StackMap locals:
StackMap stack:
aload 1
bipush 47
invokevirtual java.lang.String.lastIndexOf:(I)I
istore 3
start local 3 15: iload 3
ifgt 17
16: goto 19
17: StackMap locals: int
StackMap stack:
aload 1
iconst_0
iload 3
invokevirtual java.lang.String.substring:(II)Ljava/lang/String;
astore 1
end local 3 18: goto 12
19: StackMap locals:
StackMap stack:
iconst_0
ireturn
20: StackMap locals:
StackMap stack:
aload 2
ldc "*."
invokevirtual java.lang.String.startsWith:(Ljava/lang/String;)Z
ifeq 27
21: aload 1
bipush 47
invokevirtual java.lang.String.lastIndexOf:(I)I
istore 3
start local 3 22: aload 1
bipush 46
invokevirtual java.lang.String.lastIndexOf:(I)I
istore 4
start local 4 23: iload 3
iflt 26
iload 4
iload 3
if_icmple 26
24: aload 1
aload 2
iconst_1
invokevirtual java.lang.String.substring:(I)Ljava/lang/String;
invokevirtual java.lang.String.endsWith:(Ljava/lang/String;)Z
ifeq 26
25: iconst_1
ireturn
26: StackMap locals: int int
StackMap stack:
iconst_0
ireturn
end local 4 end local 3 27: StackMap locals:
StackMap stack:
aload 2
ldc "/"
invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
ifeq 29
28: iconst_1
ireturn
29: StackMap locals:
StackMap stack:
iconst_0
ireturn
end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 30 0 this Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 30 1 path Ljava/lang/String;
0 30 2 pattern Ljava/lang/String;
15 18 3 slash I
22 27 3 slash I
23 27 4 period I
MethodParameters:
Name Flags
path
pattern
public static org.apache.tomcat.util.descriptor.web.SecurityConstraint[] createConstraints(javax.servlet.ServletSecurityElement, java.lang.String);
descriptor: (Ljavax/servlet/ServletSecurityElement;Ljava/lang/String;)[Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
flags: (0x0009) ACC_PUBLIC, ACC_STATIC
Code:
stack=3, locals=8, args_size=2
start local 0 start local 1 0: new java.util.HashSet
dup
invokespecial java.util.HashSet.<init>:()V
astore 2
start local 2 1: aload 0
invokevirtual javax.servlet.ServletSecurityElement.getHttpMethodConstraints:()Ljava/util/Collection;
2: astore 3
start local 3 3: aload 3
invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
astore 5
goto 10
StackMap locals: javax.servlet.ServletSecurityElement java.lang.String java.util.Set java.util.Collection top java.util.Iterator
StackMap stack:
4: aload 5
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast javax.servlet.HttpMethodConstraintElement
astore 4
start local 4 5: aload 4
aload 1
iconst_1
invokestatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.createConstraint:(Ljavax/servlet/HttpConstraintElement;Ljava/lang/String;Z)Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
6: astore 6
start local 6 7: aload 6
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.findCollections:()[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iconst_0
aaload
astore 7
start local 7 8: aload 7
aload 4
invokevirtual javax.servlet.HttpMethodConstraintElement.getMethodName:()Ljava/lang/String;
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.addMethod:(Ljava/lang/String;)V
9: aload 2
aload 6
invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
pop
end local 7 end local 6 end local 4 10: StackMap locals:
StackMap stack:
aload 5
invokeinterface java.util.Iterator.hasNext:()Z
ifne 4
11: aload 0
aload 1
iconst_0
invokestatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.createConstraint:(Ljavax/servlet/HttpConstraintElement;Ljava/lang/String;Z)Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
astore 4
start local 4 12: aload 4
ifnull 19
13: aload 4
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.findCollections:()[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
iconst_0
aaload
astore 5
start local 5 14: aload 0
invokevirtual javax.servlet.ServletSecurityElement.getMethodNames:()Ljava/util/Collection;
invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
astore 7
goto 17
StackMap locals: javax.servlet.ServletSecurityElement java.lang.String java.util.Set java.util.Collection org.apache.tomcat.util.descriptor.web.SecurityConstraint org.apache.tomcat.util.descriptor.web.SecurityCollection top java.util.Iterator
StackMap stack:
15: aload 7
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast java.lang.String
astore 6
start local 6 16: aload 5
aload 6
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.addOmittedMethod:(Ljava/lang/String;)V
end local 6 17: StackMap locals:
StackMap stack:
aload 7
invokeinterface java.util.Iterator.hasNext:()Z
ifne 15
18: aload 2
aload 4
invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
pop
end local 5 19: StackMap locals: javax.servlet.ServletSecurityElement java.lang.String java.util.Set java.util.Collection org.apache.tomcat.util.descriptor.web.SecurityConstraint
StackMap stack:
aload 2
aload 2
invokeinterface java.util.Set.size:()I
anewarray org.apache.tomcat.util.descriptor.web.SecurityConstraint
invokeinterface java.util.Set.toArray:([Ljava/lang/Object;)[Ljava/lang/Object;
checkcast org.apache.tomcat.util.descriptor.web.SecurityConstraint[]
areturn
end local 4 end local 3 end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 20 0 element Ljavax/servlet/ServletSecurityElement;
0 20 1 urlPattern Ljava/lang/String;
1 20 2 result Ljava/util/Set<Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;>;
3 20 3 methods Ljava/util/Collection<Ljavax/servlet/HttpMethodConstraintElement;>;
5 10 4 methodElement Ljavax/servlet/HttpMethodConstraintElement;
7 10 6 constraint Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
8 10 7 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
12 20 4 constraint Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
14 19 5 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
16 17 6 name Ljava/lang/String;
MethodParameters:
Name Flags
element
urlPattern
private static org.apache.tomcat.util.descriptor.web.SecurityConstraint createConstraint(javax.servlet.HttpConstraintElement, java.lang.String, boolean);
descriptor: (Ljavax/servlet/HttpConstraintElement;Ljava/lang/String;Z)Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
flags: (0x000a) ACC_PRIVATE, ACC_STATIC
Code:
stack=2, locals=11, args_size=3
start local 0 start local 1 start local 2 0: new org.apache.tomcat.util.descriptor.web.SecurityConstraint
dup
invokespecial org.apache.tomcat.util.descriptor.web.SecurityConstraint.<init>:()V
astore 3
start local 3 1: new org.apache.tomcat.util.descriptor.web.SecurityCollection
dup
invokespecial org.apache.tomcat.util.descriptor.web.SecurityCollection.<init>:()V
astore 4
start local 4 2: iload 2
istore 5
start local 5 3: aload 0
invokevirtual javax.servlet.HttpConstraintElement.getTransportGuarantee:()Ljavax/servlet/annotation/ServletSecurity$TransportGuarantee;
4: getstatic javax.servlet.annotation.ServletSecurity$TransportGuarantee.NONE:Ljavax/servlet/annotation/ServletSecurity$TransportGuarantee;
5: if_acmpeq 8
6: aload 3
aload 0
invokevirtual javax.servlet.HttpConstraintElement.getTransportGuarantee:()Ljavax/servlet/annotation/ServletSecurity$TransportGuarantee;
invokevirtual javax.servlet.annotation.ServletSecurity$TransportGuarantee.name:()Ljava/lang/String;
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.setUserConstraint:(Ljava/lang/String;)V
7: iconst_1
istore 5
8: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint org.apache.tomcat.util.descriptor.web.SecurityCollection int
StackMap stack:
aload 0
invokevirtual javax.servlet.HttpConstraintElement.getRolesAllowed:()[Ljava/lang/String;
arraylength
ifle 16
9: aload 0
invokevirtual javax.servlet.HttpConstraintElement.getRolesAllowed:()[Ljava/lang/String;
astore 6
start local 6 10: aload 6
dup
astore 10
arraylength
istore 9
iconst_0
istore 8
goto 14
StackMap locals: javax.servlet.HttpConstraintElement java.lang.String int org.apache.tomcat.util.descriptor.web.SecurityConstraint org.apache.tomcat.util.descriptor.web.SecurityCollection int java.lang.String[] top int int java.lang.String[]
StackMap stack:
11: aload 10
iload 8
aaload
astore 7
start local 7 12: aload 3
aload 7
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.addAuthRole:(Ljava/lang/String;)V
end local 7 13: iinc 8 1
StackMap locals:
StackMap stack:
14: iload 8
iload 9
if_icmplt 11
15: iconst_1
istore 5
end local 6 16: StackMap locals: javax.servlet.HttpConstraintElement java.lang.String int org.apache.tomcat.util.descriptor.web.SecurityConstraint org.apache.tomcat.util.descriptor.web.SecurityCollection int
StackMap stack:
aload 0
invokevirtual javax.servlet.HttpConstraintElement.getEmptyRoleSemantic:()Ljavax/servlet/annotation/ServletSecurity$EmptyRoleSemantic;
getstatic javax.servlet.annotation.ServletSecurity$EmptyRoleSemantic.PERMIT:Ljavax/servlet/annotation/ServletSecurity$EmptyRoleSemantic;
if_acmpeq 19
17: aload 3
iconst_1
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.setAuthConstraint:(Z)V
18: iconst_1
istore 5
19: StackMap locals:
StackMap stack:
iload 5
ifeq 23
20: aload 4
aload 1
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.addPattern:(Ljava/lang/String;)V
21: aload 3
aload 4
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.addCollection:(Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;)V
22: aload 3
areturn
23: StackMap locals:
StackMap stack:
aconst_null
areturn
end local 5 end local 4 end local 3 end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 24 0 element Ljavax/servlet/HttpConstraintElement;
0 24 1 urlPattern Ljava/lang/String;
0 24 2 alwaysCreate Z
1 24 3 constraint Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
2 24 4 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
3 24 5 create Z
10 16 6 roles [Ljava/lang/String;
12 13 7 role Ljava/lang/String;
MethodParameters:
Name Flags
element
urlPattern
alwaysCreate
public static org.apache.tomcat.util.descriptor.web.SecurityConstraint[] findUncoveredHttpMethods(org.apache.tomcat.util.descriptor.web.SecurityConstraint[], boolean, org.apache.juli.logging.Log);
descriptor: ([Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;ZLorg/apache/juli/logging/Log;)[Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
flags: (0x0009) ACC_PUBLIC, ACC_STATIC
Code:
stack=7, locals=29, args_size=3
start local 0 start local 1 start local 2 0: new java.util.HashSet
dup
invokespecial java.util.HashSet.<init>:()V
astore 3
start local 3 1: new java.util.HashMap
dup
invokespecial java.util.HashMap.<init>:()V
astore 4
start local 4 2: new java.util.HashMap
dup
invokespecial java.util.HashMap.<init>:()V
astore 5
start local 5 3: new java.util.ArrayList
dup
invokespecial java.util.ArrayList.<init>:()V
astore 6
start local 6 4: aload 0
dup
astore 10
arraylength
istore 9
iconst_0
istore 8
goto 48
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List top int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[]
StackMap stack:
5: aload 10
iload 8
aaload
astore 7
start local 7 6: aload 7
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.findCollections:()[Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
astore 11
start local 11 7: aload 11
dup
astore 15
arraylength
istore 14
iconst_0
istore 13
goto 46
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] top int int org.apache.tomcat.util.descriptor.web.SecurityCollection[]
StackMap stack:
8: aload 15
iload 13
aaload
astore 12
start local 12 9: aload 12
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.findPatterns:()[Ljava/lang/String;
astore 16
start local 16 10: aload 12
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.findMethods:()[Ljava/lang/String;
astore 17
start local 17 11: aload 12
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.findOmittedMethods:()[Ljava/lang/String;
astore 18
start local 18 12: aload 17
arraylength
ifne 19
aload 18
arraylength
ifne 19
13: aload 16
dup
astore 22
arraylength
istore 21
iconst_0
istore 20
goto 17
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] org.apache.tomcat.util.descriptor.web.SecurityCollection int int org.apache.tomcat.util.descriptor.web.SecurityCollection[] java.lang.String[] java.lang.String[] java.lang.String[] top int int java.lang.String[]
StackMap stack:
14: aload 22
iload 20
aaload
astore 19
start local 19 15: aload 3
aload 19
invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
pop
end local 19 16: iinc 20 1
StackMap locals:
StackMap stack:
17: iload 20
iload 21
if_icmplt 14
18: goto 45
19: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] org.apache.tomcat.util.descriptor.web.SecurityCollection int int org.apache.tomcat.util.descriptor.web.SecurityCollection[] java.lang.String[] java.lang.String[] java.lang.String[]
StackMap stack:
aconst_null
astore 19
start local 19 20: aload 18
arraylength
ifeq 22
21: aload 18
invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
astore 19
22: StackMap locals: java.util.List
StackMap stack:
aload 16
dup
astore 23
arraylength
istore 22
iconst_0
istore 21
goto 44
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] org.apache.tomcat.util.descriptor.web.SecurityCollection int int org.apache.tomcat.util.descriptor.web.SecurityCollection[] java.lang.String[] java.lang.String[] java.lang.String[] java.util.List top int int java.lang.String[]
StackMap stack:
23: aload 23
iload 21
aaload
astore 20
start local 20 24: aload 3
aload 20
invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
ifne 43
25: aload 17
arraylength
ifne 34
26: aload 5
aload 20
invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
checkcast java.util.Set
astore 24
start local 24 27: aload 24
ifnonnull 32
28: new java.util.HashSet
dup
invokespecial java.util.HashSet.<init>:()V
astore 24
29: aload 5
aload 20
aload 24
invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
pop
30: aload 24
aload 19
invokeinterface java.util.Set.addAll:(Ljava/util/Collection;)Z
pop
31: goto 43
32: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] org.apache.tomcat.util.descriptor.web.SecurityCollection int int org.apache.tomcat.util.descriptor.web.SecurityCollection[] java.lang.String[] java.lang.String[] java.lang.String[] java.util.List java.lang.String int int java.lang.String[] java.util.Set
StackMap stack:
aload 24
aload 19
invokeinterface java.util.Set.retainAll:(Ljava/util/Collection;)Z
pop
end local 24 33: goto 43
34: StackMap locals:
StackMap stack:
aload 4
aload 20
invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
checkcast java.util.Set
astore 24
start local 24 35: aload 24
ifnonnull 38
36: new java.util.HashSet
dup
invokespecial java.util.HashSet.<init>:()V
astore 24
37: aload 4
aload 20
aload 24
invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
pop
38: StackMap locals: java.util.Set
StackMap stack:
aload 17
dup
astore 28
arraylength
istore 27
iconst_0
istore 26
goto 42
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] org.apache.tomcat.util.descriptor.web.SecurityCollection int int org.apache.tomcat.util.descriptor.web.SecurityCollection[] java.lang.String[] java.lang.String[] java.lang.String[] java.util.List java.lang.String int int java.lang.String[] java.util.Set top int int java.lang.String[]
StackMap stack:
39: aload 28
iload 26
aaload
astore 25
start local 25 40: aload 24
aload 25
invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
pop
end local 25 41: iinc 26 1
StackMap locals:
StackMap stack:
42: iload 26
iload 27
if_icmplt 39
end local 24 end local 20 43: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] org.apache.tomcat.util.descriptor.web.SecurityCollection int int org.apache.tomcat.util.descriptor.web.SecurityCollection[] java.lang.String[] java.lang.String[] java.lang.String[] java.util.List top int int java.lang.String[]
StackMap stack:
iinc 21 1
StackMap locals:
StackMap stack:
44: iload 21
iload 22
if_icmplt 23
end local 19 end local 18 end local 17 end local 16 end local 12 45: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List org.apache.tomcat.util.descriptor.web.SecurityConstraint int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[] org.apache.tomcat.util.descriptor.web.SecurityCollection[] top int int org.apache.tomcat.util.descriptor.web.SecurityCollection[]
StackMap stack:
iinc 13 1
StackMap locals:
StackMap stack:
46: iload 13
iload 14
if_icmplt 8
end local 11 end local 7 47: iinc 8 1
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List top int int org.apache.tomcat.util.descriptor.web.SecurityConstraint[]
StackMap stack:
48: iload 8
iload 9
if_icmplt 5
49: aload 4
invokeinterface java.util.Map.entrySet:()Ljava/util/Set;
invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
astore 8
goto 90
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List top java.util.Iterator
StackMap stack:
50: aload 8
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast java.util.Map$Entry
astore 7
start local 7 51: aload 7
invokeinterface java.util.Map$Entry.getKey:()Ljava/lang/Object;
checkcast java.lang.String
astore 9
start local 9 52: aload 3
aload 9
invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
ifeq 55
53: aload 5
aload 9
invokeinterface java.util.Map.remove:(Ljava/lang/Object;)Ljava/lang/Object;
pop
54: goto 90
55: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List java.util.Map$Entry java.util.Iterator java.lang.String
StackMap stack:
aload 5
aload 9
invokeinterface java.util.Map.remove:(Ljava/lang/Object;)Ljava/lang/Object;
checkcast java.util.Set
astore 10
start local 10 56: aload 7
invokeinterface java.util.Map$Entry.getValue:()Ljava/lang/Object;
checkcast java.util.Set
astore 11
start local 11 57: aload 10
ifnonnull 86
58: new java.lang.StringBuilder
dup
invokespecial java.lang.StringBuilder.<init>:()V
astore 12
start local 12 59: aload 11
invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
astore 14
goto 63
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List java.util.Map$Entry java.util.Iterator java.lang.String java.util.Set java.util.Set java.lang.StringBuilder top java.util.Iterator
StackMap stack:
60: aload 14
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast java.lang.String
astore 13
start local 13 61: aload 12
aload 13
invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
pop
62: aload 12
bipush 32
invokevirtual java.lang.StringBuilder.append:(C)Ljava/lang/StringBuilder;
pop
end local 13 63: StackMap locals:
StackMap stack:
aload 14
invokeinterface java.util.Iterator.hasNext:()Z
ifne 60
64: iload 1
ifeq 81
65: aload 2
getstatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.sm:Lorg/apache/tomcat/util/res/StringManager;
66: ldc "securityConstraint.uncoveredHttpMethodFix"
iconst_2
anewarray java.lang.Object
dup
iconst_0
67: aload 9
aastore
dup
iconst_1
aload 12
invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
invokevirtual java.lang.String.trim:()Ljava/lang/String;
aastore
68: invokevirtual org.apache.tomcat.util.res.StringManager.getString:(Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/String;
invokeinterface org.apache.juli.logging.Log.info:(Ljava/lang/Object;)V
69: new org.apache.tomcat.util.descriptor.web.SecurityCollection
dup
invokespecial org.apache.tomcat.util.descriptor.web.SecurityCollection.<init>:()V
astore 13
start local 13 70: aload 11
invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
astore 15
goto 73
StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List java.util.Map$Entry java.util.Iterator java.lang.String java.util.Set java.util.Set java.lang.StringBuilder org.apache.tomcat.util.descriptor.web.SecurityCollection top java.util.Iterator
StackMap stack:
71: aload 15
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast java.lang.String
astore 14
start local 14 72: aload 13
aload 14
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.addOmittedMethod:(Ljava/lang/String;)V
end local 14 73: StackMap locals:
StackMap stack:
aload 15
invokeinterface java.util.Iterator.hasNext:()Z
ifne 71
74: aload 13
aload 9
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.addPatternDecoded:(Ljava/lang/String;)V
75: aload 13
ldc "deny-uncovered-http-methods"
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.setName:(Ljava/lang/String;)V
76: new org.apache.tomcat.util.descriptor.web.SecurityConstraint
dup
invokespecial org.apache.tomcat.util.descriptor.web.SecurityConstraint.<init>:()V
astore 14
start local 14 77: aload 14
iconst_1
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.setAuthConstraint:(Z)V
78: aload 14
aload 13
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.addCollection:(Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;)V
79: aload 6
aload 14
invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
pop
end local 14 end local 13 80: goto 90
81: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List java.util.Map$Entry java.util.Iterator java.lang.String java.util.Set java.util.Set java.lang.StringBuilder
StackMap stack:
aload 2
getstatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.sm:Lorg/apache/tomcat/util/res/StringManager;
82: ldc "securityConstraint.uncoveredHttpMethod"
iconst_2
anewarray java.lang.Object
dup
iconst_0
83: aload 9
aastore
dup
iconst_1
aload 12
invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
invokevirtual java.lang.String.trim:()Ljava/lang/String;
aastore
84: invokevirtual org.apache.tomcat.util.res.StringManager.getString:(Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/String;
invokeinterface org.apache.juli.logging.Log.error:(Ljava/lang/Object;)V
85: goto 90
end local 12 86: StackMap locals:
StackMap stack:
aload 10
aload 11
invokeinterface java.util.Set.removeAll:(Ljava/util/Collection;)Z
pop
87: aload 10
aload 9
iload 1
88: aload 6
aload 2
89: invokestatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.handleOmittedMethods:(Ljava/util/Set;Ljava/lang/String;ZLjava/util/List;Lorg/apache/juli/logging/Log;)V
end local 11 end local 10 end local 9 end local 7 90: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List top java.util.Iterator
StackMap stack:
aload 8
invokeinterface java.util.Iterator.hasNext:()Z
ifne 50
91: aload 5
invokeinterface java.util.Map.entrySet:()Ljava/util/Set;
invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
astore 8
goto 99
StackMap locals:
StackMap stack:
92: aload 8
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast java.util.Map$Entry
astore 7
start local 7 93: aload 7
invokeinterface java.util.Map$Entry.getKey:()Ljava/lang/Object;
checkcast java.lang.String
astore 9
start local 9 94: aload 3
aload 9
invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
ifeq 96
95: goto 99
96: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List java.util.Map$Entry java.util.Iterator java.lang.String
StackMap stack:
aload 7
invokeinterface java.util.Map$Entry.getValue:()Ljava/lang/Object;
checkcast java.util.Set
aload 9
iload 1
97: aload 6
aload 2
98: invokestatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.handleOmittedMethods:(Ljava/util/Set;Ljava/lang/String;ZLjava/util/List;Lorg/apache/juli/logging/Log;)V
end local 9 end local 7 99: StackMap locals: org.apache.tomcat.util.descriptor.web.SecurityConstraint[] int org.apache.juli.logging.Log java.util.Set java.util.Map java.util.Map java.util.List top java.util.Iterator
StackMap stack:
aload 8
invokeinterface java.util.Iterator.hasNext:()Z
ifne 92
100: aload 6
aload 6
invokeinterface java.util.List.size:()I
anewarray org.apache.tomcat.util.descriptor.web.SecurityConstraint
invokeinterface java.util.List.toArray:([Ljava/lang/Object;)[Ljava/lang/Object;
checkcast org.apache.tomcat.util.descriptor.web.SecurityConstraint[]
areturn
end local 6 end local 5 end local 4 end local 3 end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 101 0 constraints [Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
0 101 1 denyUncoveredHttpMethods Z
0 101 2 log Lorg/apache/juli/logging/Log;
1 101 3 coveredPatterns Ljava/util/Set<Ljava/lang/String;>;
2 101 4 urlMethodMap Ljava/util/Map<Ljava/lang/String;Ljava/util/Set<Ljava/lang/String;>;>;
3 101 5 urlOmittedMethodMap Ljava/util/Map<Ljava/lang/String;Ljava/util/Set<Ljava/lang/String;>;>;
4 101 6 newConstraints Ljava/util/List<Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;>;
6 47 7 constraint Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
7 47 11 collections [Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
9 45 12 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
10 45 16 patterns [Ljava/lang/String;
11 45 17 methods [Ljava/lang/String;
12 45 18 omittedMethods [Ljava/lang/String;
15 16 19 pattern Ljava/lang/String;
20 45 19 omNew Ljava/util/List<Ljava/lang/String;>;
24 43 20 pattern Ljava/lang/String;
27 33 24 om Ljava/util/Set<Ljava/lang/String;>;
35 43 24 m Ljava/util/Set<Ljava/lang/String;>;
40 41 25 method Ljava/lang/String;
51 90 7 entry Ljava/util/Map$Entry<Ljava/lang/String;Ljava/util/Set<Ljava/lang/String;>;>;
52 90 9 pattern Ljava/lang/String;
56 90 10 omittedMethods Ljava/util/Set<Ljava/lang/String;>;
57 90 11 methods Ljava/util/Set<Ljava/lang/String;>;
59 86 12 msg Ljava/lang/StringBuilder;
61 63 13 method Ljava/lang/String;
70 80 13 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
72 73 14 method Ljava/lang/String;
77 80 14 constraint Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
93 99 7 entry Ljava/util/Map$Entry<Ljava/lang/String;Ljava/util/Set<Ljava/lang/String;>;>;
94 99 9 pattern Ljava/lang/String;
MethodParameters:
Name Flags
constraints
denyUncoveredHttpMethods
log
private static void handleOmittedMethods(java.util.Set<java.lang.String>, java.lang.String, boolean, java.util.List<org.apache.tomcat.util.descriptor.web.SecurityConstraint>, org.apache.juli.logging.Log);
descriptor: (Ljava/util/Set;Ljava/lang/String;ZLjava/util/List;Lorg/apache/juli/logging/Log;)V
flags: (0x000a) ACC_PRIVATE, ACC_STATIC
Code:
stack=7, locals=9, args_size=5
start local 0 start local 1 start local 2 start local 3 start local 4 0: aload 0
invokeinterface java.util.Set.size:()I
ifle 28
1: new java.lang.StringBuilder
dup
invokespecial java.lang.StringBuilder.<init>:()V
astore 5
start local 5 2: aload 0
invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
astore 7
goto 6
StackMap locals: java.util.Set java.lang.String int java.util.List org.apache.juli.logging.Log java.lang.StringBuilder top java.util.Iterator
StackMap stack:
3: aload 7
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast java.lang.String
astore 6
start local 6 4: aload 5
aload 6
invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
pop
5: aload 5
bipush 32
invokevirtual java.lang.StringBuilder.append:(C)Ljava/lang/StringBuilder;
pop
end local 6 6: StackMap locals:
StackMap stack:
aload 7
invokeinterface java.util.Iterator.hasNext:()Z
ifne 3
7: iload 2
ifeq 24
8: aload 4
getstatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.sm:Lorg/apache/tomcat/util/res/StringManager;
9: ldc "securityConstraint.uncoveredHttpOmittedMethodFix"
iconst_2
anewarray java.lang.Object
dup
iconst_0
10: aload 1
aastore
dup
iconst_1
aload 5
invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
invokevirtual java.lang.String.trim:()Ljava/lang/String;
aastore
11: invokevirtual org.apache.tomcat.util.res.StringManager.getString:(Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/String;
invokeinterface org.apache.juli.logging.Log.info:(Ljava/lang/Object;)V
12: new org.apache.tomcat.util.descriptor.web.SecurityCollection
dup
invokespecial org.apache.tomcat.util.descriptor.web.SecurityCollection.<init>:()V
astore 6
start local 6 13: aload 0
invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
astore 8
goto 16
StackMap locals: java.util.Set java.lang.String int java.util.List org.apache.juli.logging.Log java.lang.StringBuilder org.apache.tomcat.util.descriptor.web.SecurityCollection top java.util.Iterator
StackMap stack:
14: aload 8
invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
checkcast java.lang.String
astore 7
start local 7 15: aload 6
aload 7
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.addMethod:(Ljava/lang/String;)V
end local 7 16: StackMap locals:
StackMap stack:
aload 8
invokeinterface java.util.Iterator.hasNext:()Z
ifne 14
17: aload 6
aload 1
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.addPatternDecoded:(Ljava/lang/String;)V
18: aload 6
ldc "deny-uncovered-http-methods"
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityCollection.setName:(Ljava/lang/String;)V
19: new org.apache.tomcat.util.descriptor.web.SecurityConstraint
dup
invokespecial org.apache.tomcat.util.descriptor.web.SecurityConstraint.<init>:()V
astore 7
start local 7 20: aload 7
iconst_1
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.setAuthConstraint:(Z)V
21: aload 7
aload 6
invokevirtual org.apache.tomcat.util.descriptor.web.SecurityConstraint.addCollection:(Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;)V
22: aload 3
aload 7
invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
pop
end local 7 end local 6 23: goto 28
24: StackMap locals: java.util.Set java.lang.String int java.util.List org.apache.juli.logging.Log java.lang.StringBuilder
StackMap stack:
aload 4
getstatic org.apache.tomcat.util.descriptor.web.SecurityConstraint.sm:Lorg/apache/tomcat/util/res/StringManager;
25: ldc "securityConstraint.uncoveredHttpOmittedMethod"
iconst_2
anewarray java.lang.Object
dup
iconst_0
26: aload 1
aastore
dup
iconst_1
aload 5
invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
invokevirtual java.lang.String.trim:()Ljava/lang/String;
aastore
27: invokevirtual org.apache.tomcat.util.res.StringManager.getString:(Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/String;
invokeinterface org.apache.juli.logging.Log.error:(Ljava/lang/Object;)V
end local 5 28: StackMap locals:
StackMap stack:
return
end local 4 end local 3 end local 2 end local 1 end local 0 LocalVariableTable:
Start End Slot Name Signature
0 29 0 omittedMethods Ljava/util/Set<Ljava/lang/String;>;
0 29 1 pattern Ljava/lang/String;
0 29 2 denyUncoveredHttpMethods Z
0 29 3 newConstraints Ljava/util/List<Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;>;
0 29 4 log Lorg/apache/juli/logging/Log;
2 28 5 msg Ljava/lang/StringBuilder;
4 6 6 method Ljava/lang/String;
13 23 6 collection Lorg/apache/tomcat/util/descriptor/web/SecurityCollection;
15 16 7 method Ljava/lang/String;
20 23 7 constraint Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;
Signature: (Ljava/util/Set<Ljava/lang/String;>;Ljava/lang/String;ZLjava/util/List<Lorg/apache/tomcat/util/descriptor/web/SecurityConstraint;>;Lorg/apache/juli/logging/Log;)V
MethodParameters:
Name Flags
omittedMethods
pattern
denyUncoveredHttpMethods
newConstraints
log
}
SourceFile: "SecurityConstraint.java"
InnerClasses:
public abstract Entry = java.util.Map$Entry of java.util.Map
public final EmptyRoleSemantic = javax.servlet.annotation.ServletSecurity$EmptyRoleSemantic of javax.servlet.annotation.ServletSecurity
public final TransportGuarantee = javax.servlet.annotation.ServletSecurity$TransportGuarantee of javax.servlet.annotation.ServletSecurity