[
https://issues.apache.org/jira/browse/AXIOM-62?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andreas Veithen reopened AXIOM-62:
----------------------------------
Assignee: Andreas Veithen (was: Rich Scheuerle)
I'm reopening this issue. As noted in the description, this is actually an
issue with the underlying StAX implementation. On the other hand, executing
createXMLStream(Reader|Writer) with doPrivileged causes unnecessary overhead
and is questionable from a security point of view because it may give the code
that calls StAXUtils privileges it is not expected to have.
> Java2Security Error. StAXUtils needs a AccessController code.
> --------------------------------------------------------------
>
> Key: AXIOM-62
> URL: https://issues.apache.org/jira/browse/AXIOM-62
> Project: Axiom
> Issue Type: Bug
> Reporter: Rich Scheuerle
> Assignee: Andreas Veithen
>
> Problem:
> StAXUtils.createXMLStreamReader(...) and StAXUtils.createXMLStreamWriter(...)
> methods call out to the plugged in stax implementation. Brent Ulbricht
> discovered a J2S
> exception in a non-woodstox parser.
> Solution:
> I am pursuing a fix with the one of the owners of the parser. In addition, I
> am using this JIRA to do surround the code in a AccessController.doPriv
> block. This solution is consistent with pre-existing code in doPriv code in
> StAXUtils.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
