[ 
https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14617578#comment-14617578
 ] 

Uwe Schindler edited comment on TIKA-1675 at 7/7/15 10:53 PM:
--------------------------------------------------------------

There was already an issue/discussion open on POI mailing lists and issue 
tracker to no longer use xmlbeans & Co, because since Java 6 the JAXB interface 
is a public API that allows to map XML documents to Java Beans 
(https://jcp.org/en/jsr/detail?id=222) - which is exactly the same as xmlbeans 
is dooing. Unfortunately this is a larger approach to change the API to do use 
the standards Java API (and might also bring more performance). This would 
remove a lot of unneeded XML-based stuff from POI for Microsoft Office 2007+ 
file formats.

-1 to absorb the buggy xmlbeans (this lib was also the problem of the major 
Solr/Lucene security issue last year)
+1 to adopt JAXB instead of xmlbeans


was (Author: thetaphi):
There was already an issue/discussion open on POI mailing lists and issue 
tracker to no longer use xmlbeans & Co, because since Java 6 the JAXB interface 
is a public API that allows to map XML documents to Java Beans - which is 
exactly the same as xmlbeans is dooing. Unfortunately this is a larger approach 
to change the API to do use the standards Java API (and might also bring more 
performance). This would remove a lot of unneeded XML-based stuff from POI for 
Microsoft Office 2007+ file formats.

-1 to absorb the buggy xmlbeans (this lib was also the problem of the major 
Solr/Lucene security issue last year)
+1 to adopt JAXB instead of xmlbeans

> please avoid xmlbeans dependency
> --------------------------------
>
>                 Key: TIKA-1675
>                 URL: https://issues.apache.org/jira/browse/TIKA-1675
>             Project: Tika
>          Issue Type: Bug
>            Reporter: Robert Muir
>
> This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499
> Is there an alternative that could be used?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to