neeraj 2003/01/16 10:46:57
Modified: java/src/org/apache/xerces/impl/msg
XMLSchemaMessages.properties
Log:
Fixing another security problem. High value of maxOccur attirbute causes
stackoverflow error. When application switches the mode of parser to behave in
security conscious way using SecurityConfiguration. It sets the maximum number of
nodes that should be created when building
content model from maxOccurs attribute value specified in schema document, number of
nodes created depneds upon the type of content model and value of maxOccurs
attribute.Current limit of maximum number ofnodes has been set to 3000. However, it
can be set to higher value if required by the application using SecurityManager Object.
Revision Changes Path
1.55 +4 -1
xml-xerces/java/src/org/apache/xerces/impl/msg/XMLSchemaMessages.properties
Index: XMLSchemaMessages.properties
===================================================================
RCS file:
/home/cvs/xml-xerces/java/src/org/apache/xerces/impl/msg/XMLSchemaMessages.properties,v
retrieving revision 1.54
retrieving revision 1.55
diff -u -r1.54 -r1.55
--- XMLSchemaMessages.properties 9 Dec 2002 22:08:45 -0000 1.54
+++ XMLSchemaMessages.properties 16 Jan 2003 18:46:57 -0000 1.55
@@ -327,8 +327,11 @@
FacetValueFromBase = FacetValueFromBase: Value ''{0}'' of facet ''{1}''
must be from the value space of the base type.
FixedFacetValue = FixedFacetValue: ''{0}'' value = ''{1}'' must be equal to
that of the base type ''{2}'' when '{'fixed'}' = true.
InvalidRegex = InvalidRegex: Pattern value ''{0}'' is not a valid regular
expression: ''{1}''.
+ maxOccurLimit = Current configuration of the parser doesn't allow maxOccur
attribute value to bet set greater than ''{0}'' value.
SchemaLocation = SchemaLocation: schemaLocation value = ''{0}'' must have
even number of URI's.
TargetNamespace.1 = TargetNamespace.1: Expecting namespace ''{0}'', but the
target namespace of the schema document is ''{1}''.
TargetNamespace.2 = TargetNamespace.2: Expecting no namespace, but the
schema document has a target namespace.
UndeclaredEntity = UndeclaredEntity: Entity ''{0}'' is not declared.
UndeclaredPrefix = UndeclaredPrefix: Cannot resolve ''{0}'' as a QName: the
prefix ''{1}'' is not declared.
+
+
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
