[ 
https://issues.apache.org/jira/browse/XALANJ-2436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jérôme Leroux updated XALANJ-2436:
----------------------------------
    Attachment: XALAN-2436.patch

Attach patch:
- Fix for XALAN-2436: use {{jarjar}} task in the {{build.xml}} instead of 
{{jar}} task

To make it works, download _Jar Jar Links_ jar in {{tools/}} directory. It can 
be downloaded here: 
https://code.google.com/p/jarjar/downloads/detail?name=jarjar-src-1.4.zip&can=2&q=

Some links:
_Jar Jar Links_ project: https://code.google.com/p/jarjar/
_Jar Jar Links_ license: http://www.apache.org/licenses/LICENSE-2.0

> Xalan must not expose bundled classes (bcel, regexp)
> ----------------------------------------------------
>
>                 Key: XALANJ-2436
>                 URL: https://issues.apache.org/jira/browse/XALANJ-2436
>             Project: XalanJ2
>          Issue Type: Bug
>          Components: Xalan
>    Affects Versions: 2.7.1
>         Environment: any
>            Reporter: Holger Hoffstätte
>            Priority: Critical
>         Attachments: XALAN-2436.patch, rewrite-packages.rules
>
>
> I just spent the better part of half a day figuring out what caused the 
> problem outlined in 
> https://sourceforge.net/tracker/?func=detail&atid=614693&aid=1902137&group_id=96405.
> Xalan bundles regexp and bcel, however since one of the recommened ways of 
> installing xalan is via the endorsed mechanism this will wreak serious havoc 
> on any other apps that use bcel. That would be less of a problem is xalan's 
> version were up to date, but as of 2.7.1 it still includes a version from the 
> early stone age (see XALANJ-2423). The solution is easy: when building the 
> aggregate jar, add an ant task to rewrite the bundled packages via jarjar 
> (http://code.google.com/p/jarjar/). This can be trivially added to the build 
> and creates a completely self-contained xalan jar that will not blow up the 
> world when endorsed.
> I will attach a trivial rule file for jarjar that rewrites the embedded 
> packages which should immediately fix any collision problems. For more 
> information about how to use jarjar, see 
> http://code.google.com/p/jarjar/wiki/GettingStarted



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@xalan.apache.org
For additional commands, e-mail: dev-h...@xalan.apache.org

Reply via email to