[
https://issues.apache.org/jira/browse/DAFFODIL-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16667281#comment-16667281
]
Michael Beckerle commented on DAFFODIL-602:
-------------------------------------------
See https://github.com/scala/scala-xml/issues/17 which describes settings for
fixing this.
> Setting to prevent off-box access to schemas
> --------------------------------------------
>
> Key: DAFFODIL-602
> URL: https://issues.apache.org/jira/browse/DAFFODIL-602
> Project: Daffodil
> Issue Type: New Feature
> Components: API, Front End
> Affects Versions: s8
> Reporter: Michael Beckerle
> Priority: Major
>
> For many DFDL applications this is a must-have capability.
> Systems whose job is to scrutinize data carefully must have a controlled base
> of DFDL schemas that are well trusted.
> Reaching out the internet to get schemas is definitely unacceptable for these
> applications.
> As for how to test this.... keep in mind that just disconnecting a test box
> from the internet won't do it. A test might not fail just because a probe for
> a schema on the internet failed. It might behave in some different manner if
> it is unable to successfully reach the internet, yet still be making the
> attempts. The requirement here is that it not even be attempting to contact
> the internet to get schemas.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
