Hi all, In the class at [1], there is a code segment which switches the DocumentBuilderFactory implementation in a non-thread safe manner. Anway, DocumentBuilderFactory shouldn't be switched like this. This breaks WSDL retrieval after a considerable load on a UT enabled service.
Hence, can security team verify the attached patch[2] and apply it. /Ruchira [1] https://svn.wso2.org/repos/wso2/carbon/platform/branches/turing/components/security/org.wso2.carbon.security.mgt/4.2.1/src/main/java/org/wso2/carbon/security/pox/POXSecurityHandler.java [2] https://wso2.org/jira/browse/ESBJAVA-2665 -- *Ruchira Wageesha**Associate Technical Lead* *WSO2 Inc. - lean . enterprise . middleware | wso2.com <http://wso2.com>* *email: [email protected] <[email protected]>, blog: ruchirawageesha.blogspot.com <http://ruchirawageesha.blogspot.com>, mobile: +94 77 5493444*
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
