[
https://issues.apache.org/jira/browse/XALANJ-2341?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12550636
]
Michael Glavassevich commented on XALANJ-2341:
----------------------------------------------
Quite certain that I verified this a year ago before the serializer.jar from
Xalan 2.7.1 went out in Xerces 2.9.0.
> [PATCH]: AccessController should be used when querying system properties
> ------------------------------------------------------------------------
>
> Key: XALANJ-2341
> URL: https://issues.apache.org/jira/browse/XALANJ-2341
> Project: XalanJ2
> Issue Type: Improvement
> Affects Versions: 2.7
> Reporter: Michael Glavassevich
> Assignee: Brian Minchau
> Fix For: 2.7.1
>
> Attachments: serializer-access-controller-patch.txt
>
>
> Now that Xalan has dropped support of JDK 1.1 it can now take full advantage
> of Java's security framework. An AccessController should be used when
> querying system properties. I see this is already being done (e.g.
> SecuritySupport) in some parts of Xalan already. The patch covers a couple
> places where the "line.separator" property is looked up.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
