RFR: JAXP 1.5 for JDK8/7u40: 8016648: FEATURE_SECURE_PROCESSING set to true or false causes SAXParseException to be thrown
huizhe wang
huizhe.wang at oracle.com
Tue Jul 9 01:07:32 UTC 2013
Hi,
I've updated webrev with improved property management, and quality
backed by 320 test cases. Thanks Daniel for the help expanding the test
suite!
Here's the webrev:
http://cr.openjdk.java.net/~joehw/jdk8/8016648/webrev/
-Joe
On 7/5/2013 6:48 PM, huizhe wang wrote:
>
> On 7/5/2013 1:32 AM, Alan Bateman wrote:
>> On 04/07/2013 21:25, huizhe wang wrote:
>>>
>>> Reverted back to the original code:
>>> http://cr.openjdk.java.net/~joehw/jdk8/8016648/webrev/
>>> The code split the version number and look at the 1st or 2nd
>>> element, it thus works for both the current format and the proposed
>>> one, e.g. for 1.7.0, it compares with the 2nd element, and for the
>>> proposed MAJOR.MINOR.FU.*, the 1st or MAJOR.
>> Thanks for dropping the dependency on javax.lang.model. What you now
>> is probably okay although I'm a bit dubious about attempting to
>> support an alternative format (I'm not aware of any proposal that
>> changes the format of the java.version property as changing it would
>> like cause a lot of breakage).
>
> There was a survey from Iris last year, and the JPG site has a
> presentation from Aurelio. But you're right, I'll remove it. If
> there's any change in the future, that is if it happens at all, we can
> always add that back.
>>
>> A minor point but isJDKOrAbove looks a bit odd to me, I'd probably go
>> for something like isJavaVersionGTE or isJavaVersionAtLeast but as
>> it's not part of the API then it doesn't matter of course.
>
> isJavaVersionAtLeast is easy to understand. What does GTE stand for?
>
>>
>> I think I mentioned it a while back but have warnings emitted with
>> System.err can be problematic (gets mixed up with application
>> messages to stderr). I realize the Xerces code seems to do this in
>> places but we really need to see about eliminating these messages or
>> getting consistent logging into this code.
>
> I agree, this one is not particularly graceful. There were 88 matches
> of System.err in Xalan and 75 in Xerces, although some I believe are
> used for debugging. It could take quite some effort.
>
> I mentioned that with a standalone release, we were trying to stay
> away from new JDK features. It's probably better to spend time/effort
> on some upgrades.
>
>>
>>> :
>>>
>>> The last scenario to work on is if FSP is set on the Validator
>>> instead of SchemaFactory. With that, I'm looking at refactoring the
>>> way properties are represented so that they carry state. It would
>>> then be cleaner to pass them from SchemaFactory over to Schema and
>>> then Validator. It's a bit of work. Fortunately, we only have three
>>> of them to deal with.
>> So are you planning to send another webrev or do it as a separate issue?
>
> Looking at affected code by this change, it doesn't seem to be too
> bad. I'll send another webrev.
>
> Joe
>
>>
>> -Alan
>
More information about the core-libs-dev
mailing list