RFR (JAXP): 8028111 : XML readers share the same entity expansion counter

Alan Bateman Alan.Bateman at oracle.com
Wed Nov 13 21:33:57 UTC 2013


On 13/11/2013 20:02, huizhe wang wrote:
> Hi,
>
> The issue is that the limits applied to each processing process rather 
> than each file processing. This applies to not only StAX as reported, 
> but also other parsers and validators. The fix is to add reset to 
> XMLSecurityManager and call it upon each file processing. XSLT 
> Transform is verified fixed as the underlying parsers are fixed.
>
> webrev:
> http://cr.openjdk.java.net/~joehw/jdk8/8028111/webrev/
This looks okay as a band-aid but won't this be replaced if fixed to 
have limits per document?

-Alan.



More information about the core-libs-dev mailing list