> I hadn't thought of that angle. This thread is renewing my energy to push a > little more on that issue. I think discussion of security consequences might > produce more expedient action on their part. This is a Jetty specific bug, I take it? We should start charging container projects to *not* choose them as our baseline. -- Scott