SEVERE: don't pass the component context to child Restlets anymore

[Jim Alateras]

Gents,

I am using the latest on 1.1 branch and am getting a whole lot of  
SEVERE errors. while running my test cases but they seem to be benign.

SEVERE: For security reasons, don't pass the component context to  
child Restlets anymore. Use the Context#createChildContext() method  
instead.class org.restlet.Finder
Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged
SEVERE: For security reasons, don't pass the component context to  
child Restlets anymore. Use the Context#createChildContext() method  
instead.class org.restlet.Route
Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged
SEVERE: For security reasons, don't pass the component context to  
child Restlets anymore. Use the Context#createChildContext() method  
instead.class org.restlet.Finder
Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged
SEVERE: For security reasons, don't pass the component context to  
child Restlets anymore. Use the Context#createChildContext() method  
instead.class org.restlet.Route
Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged


cheers
</jima>

------------------------------------------------------
http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2412787

[Bruno Harbulot]

Hi Jim,

It's actually quite important to separate the various settings you pass
to the Component (and the connectors) from those you pass to the
Application itself. This way, you prevent leakage of sensitive
information (such as private keys for SSL connectors) to the Application.
One easy way to solve this is to set the Application's context to
component.getContext().createChildContext(), either in the Application
constructor or via setContext().

Best wishes,

Bruno.

Jim Alateras wrote:

> Gents,
>
> I am using the latest on 1.1 branch and am getting a whole lot of  
> SEVERE errors. while running my test cases but they seem to be benign.
>
> SEVERE: For security reasons, don't pass the component context to  
> child Restlets anymore. Use the Context#createChildContext() method  
> instead.class org.restlet.Finder
> Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged
> SEVERE: For security reasons, don't pass the component context to  
> child Restlets anymore. Use the Context#createChildContext() method  
> instead.class org.restlet.Route
> Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged
> SEVERE: For security reasons, don't pass the component context to  
> child Restlets anymore. Use the Context#createChildContext() method  
> instead.class org.restlet.Finder
> Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged
> SEVERE: For security reasons, don't pass the component context to  
> child Restlets anymore. Use the Context#createChildContext() method  
> instead.class org.restlet.Route
> Oct 29, 2009 11:57:55 PM com.noelios.restlet.Engine fireContextChanged
>
>
> cheers
> </jima>
>
> ------------------------------------------------------
> http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2412787
>

------------------------------------------------------
http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2412844