RFR (JAXP): 8028111 : XML readers share the same entity expansion counter
Alan Bateman
Alan.Bateman at oracle.com
Wed Nov 13 21:33:57 UTC 2013
On 13/11/2013 20:02, huizhe wang wrote:
> Hi,
>
> The issue is that the limits applied to each processing process rather
> than each file processing. This applies to not only StAX as reported,
> but also other parsers and validators. The fix is to add reset to
> XMLSecurityManager and call it upon each file processing. XSLT
> Transform is verified fixed as the underlying parsers are fixed.
>
> webrev:
> http://cr.openjdk.java.net/~joehw/jdk8/8028111/webrev/
This looks okay as a band-aid but won't this be replaced if fixed to
have limits per document?
-Alan.
More information about the core-libs-dev
mailing list