RFR: 8151893: Add security property to configure XML Signature secure validation mode

Weijun Wang weijun.wang at oracle.com
Thu Aug 25 14:51:39 UTC 2016


I prefer Locale.ROOT now.

--Max

On 8/25/2016 22:14, Sean Mullan wrote:
>>  103   disallowedRefUriSchemes.add(scheme.toLowerCase());
>> Better to use toLowerCase(Locale.ENGLISH).  There are issues to use
>> toUpperCase/toLowerCase when comparing two case-insensitive strings. See
>> JDK-6972387.
>
> Ok.
>
>> The same comment for other use of toLowerCase().
>
> Ok.



More information about the security-dev mailing list