RFR: 8151893: Add security property to configure XML Signature secure validation mode
Weijun Wang
weijun.wang at oracle.com
Thu Aug 25 14:51:39 UTC 2016
I prefer Locale.ROOT now.
--Max
On 8/25/2016 22:14, Sean Mullan wrote:
>> 103 disallowedRefUriSchemes.add(scheme.toLowerCase());
>> Better to use toLowerCase(Locale.ENGLISH). There are issues to use
>> toUpperCase/toLowerCase when comparing two case-insensitive strings. See
>> JDK-6972387.
>
> Ok.
>
>> The same comment for other use of toLowerCase().
>
> Ok.
More information about the security-dev
mailing list