RFR (JAXP): 8049514: FEATURE_SECURE_PROCESSING can not be turned off on a validator through SchemaFactory
Lance Andersen
Lance.Andersen at oracle.com
Wed Jul 16 23:21:40 UTC 2014
Seems fine Joe…
On Jul 16, 2014, at 11:47 AM, huizhe wang <huizhe.wang at oracle.com> wrote:
> Hi,
>
> JAXP SecurityManager was re-designed to XMLSecurityManager to manage jaxp related limits or restrictions. Previously, the existence of a SecurityManager was equivalent to setting FEATURE_SECURE_PROCESSING to true. After the change, secure processing became a property of XMLSecurityManager, thus needs to be queried in order to determine the status of secure processing.
>
> Since secure processing is true by default, this bug made it impossible to turn off secure processing on a validator through the factory when there is no Java Security Manager.
>
> Please review:
> http://cr.openjdk.java.net/~joehw/jdk9/8049514/webrev/
>
> Thanks,
> Joe
Lance Andersen| Principal Member of Technical Staff | +1.781.442.2037
Oracle Java Engineering
1 Network Drive
Burlington, MA 01803
Lance.Andersen at oracle.com
More information about the core-libs-dev
mailing list