Request to remove the --allow-script-in-comments flag which was added to the standard doclet in 1.8.0_121

Peter A peter.abeles at gmail.com
Thu May 18 15:03:38 UTC 2017


That addition in 1.8.0_121 broke a LOT of projects. What it does is without
the flag you can't add javascript to your JavaDoc. The general consensus is
that it appears to be some sort of security enhancement by forcing people
to explicitly allow JavaScript when it's added to javadoc. However, you
have to go out of your way to insert JavaScript into your JavaDoc anyways
so I'm not sure what it accomplishes besides creating headaches for a lot
of people.

   - To see the wake of devastation it caused do a search for
   "--allow-script-in-comments"
   - According to [1] it is in the standard doclet and not the actual
   javadoc code.
   - Here's a discussion of the problems it has caused for Gradle [2].

[1] http://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8176089
[2] https://github.com/gradle/gradle/issues/1393

Thanks,
- Peter

P.S. Apologies if this is the wrong list. Still getting my head wrapped
around what goes in here and what doesn't.



-- 
"Now, now my good man, this is no time for making enemies."    — Voltaire
(1694-1778), on his deathbed in response to a priest asking that he
renounce Satan.


More information about the adoption-discuss mailing list