Comment 3 for bug 1606331

Created attachment 33549
patch

Hi,

I'm attaching here a patch proposal so that others can comment.

I found one more problem:

Packages
org.apache.tomcat.jdbc
javax.servlet.jsp.jstl

should be permitted, but the current implementation allows only sub packages for these packages.

Regards,
Violeta