[
https://issues.apache.org/jira/browse/TIKA-4135?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17769268#comment-17769268
]
Hudson commented on TIKA-4135:
------------------------------
UNSTABLE: Integrated in Jenkins build Tika ยป tika-main-jdk11 #1264 (See
[https://ci-builds.apache.org/job/Tika/job/tika-main-jdk11/1264/])
TIKA-4135 -- remove xerces2 as a dependency (#1360) (github:
[https://github.com/apache/tika/commit/caf312593273c92bf02692ce42cd260183785685])
* (edit) tika-core/src/test/java/org/apache/tika/sax/CustomErrorHandlerTest.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-package/src/test/java/org/apache/tika/parser/XMLTestBase.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-xml-module/pom.xml
* (edit) tika-core/pom.xml
* (edit) tika-core/src/main/java/org/apache/tika/utils/XMLReaderUtils.java
* (edit) tika-parsers/tika-parsers-ml/tika-parser-nlp-module/pom.xml
* (delete)
tika-core/src/test/java/org/apache/tika/sax/ErrorResistantSAXParserFactory.java
* (edit) tika-parent/pom.xml
* (edit) CHANGES.txt
* (edit) tika-bundles/tika-bundle-standard/pom.xml
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-microsoft-module/pom.xml
> Remove xerces from Tika 3.x/main branch?
> ----------------------------------------
>
> Key: TIKA-4135
> URL: https://issues.apache.org/jira/browse/TIKA-4135
> Project: Tika
> Issue Type: Wish
> Reporter: Tim Allison
> Priority: Major
>
> We've gotten requests over the years to get rid of xerces. Should we do that
> in 3.x/main?
> The one nice thing about including it is that it offers some consistency
> across java versions and platforms. This can help with securing the parsers
> (against xxe, etc). This can also make debugging easier.
> However, as people have pointed out, the xerces project appears to be in
> security-fix-only mode.
> WDYT?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
