[
https://issues.apache.org/jira/browse/HADOOP-12126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gera Shegalov updated HADOOP-12126:
-----------------------------------
Affects Version/s: 2.7.0
> Configuration might use ApplicationClassLoader to create XML parser
> -------------------------------------------------------------------
>
> Key: HADOOP-12126
> URL: https://issues.apache.org/jira/browse/HADOOP-12126
> Project: Hadoop Common
> Issue Type: Bug
> Components: conf
> Affects Versions: 2.7.0
> Reporter: Laurent Goujon
> Assignee: Laurent Goujon
> Attachments: HADOOP-12126.001.patch, HADOOP-12126.002.patch,
> HADOOP-12126.003.patch
>
>
> {{org.apache.hadoop.conf.Configuration}} creates a new DocumentBuilder to
> parse the XML config files, but it doesn't specify which classloader to use
> to discover and instantiate the XML parser.
> Because DocumentBuilderFactory relies on ServiceProvider, whose by default,
> uses the context classloader. If classpath isolation is turned on, one might
> expect that that Configuration will only load classes from the system
> classloader, but it turns out that the context classloader is set to
> ApplicationClassLoader, and that a XML parser might be loaded from the user
> classpath.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
