-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Micheal,

On 12/19/2010 7:35 AM, Michael Ludwig wrote:
> In the case
> of Xerces, however, it is preferable to put the JAR(s)
> into %CATALINA_HOME%\endorsed (which may not exist but may
> be created) so they will be available to all of Tomcat and
> outmatch the Sun fork shipping with the JRE.

I'm not sure I'd recommend this unless no other option will work:
overriding the vendor-supplied XML parser with one that is quite old (as
Xerces 2.6.1 appears to be) may open you up to security vulnerabilities
as well as other incompatibilities with the library. Always be sure to
test thoroughly before going into production.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0PugEACgkQ9CaO5/Lv0PChqACfSBG/O9XOqc7W0/o7s1J97Vmb
n30AoKlErx3YPocr8qWX3yeUg/IU4vpN
=SG0d
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to