aruny       2004/02/12 01:37:22

  Added:       java/src/org/apache/xalan/xsltc/compiler Tag:
                        jaxp12112003_branch ObjectFactory.java
                        SecuritySupport.java SecuritySupport12.java
  Log:
  ObjectFactory class exposes class loaders publicly which allow untrusted code 
to access internal classes. Making following changes to fix it.
  
  1.Duplicating the ObjectFactory, SecuritySupport.java and 
SecuritySupport12.java class in order to make it package private in each of the 
  packages that require its services.
  2.Using checkPackageAccess() to prevent access to internal packages of 
jdk(sun.*).
  
  Revision  Changes    Path
  No                   revision
  No                   revision
  1.1.2.1   +665 -0    
xml-xalan/java/src/org/apache/xalan/xsltc/compiler/Attic/ObjectFactory.java
  
  
  
  
  1.1.2.1   +159 -0    
xml-xalan/java/src/org/apache/xalan/xsltc/compiler/Attic/SecuritySupport.java
  
  
  
  
  1.1.2.1   +180 -0    
xml-xalan/java/src/org/apache/xalan/xsltc/compiler/Attic/SecuritySupport12.java
  
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to