[
https://issues.apache.org/jira/browse/JCR-5265?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18125037#comment-18125037
]
Julian Reschke commented on JCR-5265:
-------------------------------------
I'm completely convinced.
Both embedding or having it in the dist sounds sub-optimal.
Why don't we just fix what we have, if it needs fixing?
> Adopt Apache Commons Secure XML
> -------------------------------
>
> Key: JCR-5265
> URL: https://issues.apache.org/jira/browse/JCR-5265
> Project: Jackrabbit Content Repository
> Issue Type: Improvement
> Components: jackrabbit-jcr-commons
> Reporter: Konrad Windszus
> Priority: Major
>
> Instead of leveraging the helpers introduced with JCR-5195 I suggest using
> [https://commons.apache.org/proper/commons-secure-xml.|https://commons.apache.org/proper/commons-secure-xml/]
> It has the advantage that it is secure irrespective of the underlying JAXP
> implementation being used. Further information in
> [https://commons.apache.org/proper/commons-secure-xml/apidocs/index.html#why-heading].
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
