You are viewing a plain text version of this content. The canonical link for it is here.
Posted to j-dev@xerces.apache.org by bu...@apache.org on 2001/05/10 13:43:32 UTC

[Bug 1698] New - SecurityException when using parser in sandbox (applet, webstart, ...)

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=1698

*** shadow/1698	Thu May 10 04:43:32 2001
--- shadow/1698.tmp.18018	Thu May 10 04:43:32 2001
***************
*** 0 ****
--- 1,21 ----
+ +============================================================================+
+ | SecurityException when using parser in sandbox (applet, webstart, ...)     |
+ +----------------------------------------------------------------------------+
+ |        Bug #: 1698                        Product: Xerces-J                |
+ |       Status: NEW                         Version: 1.3.1                   |
+ |   Resolution:                            Platform: All                     |
+ |     Severity: Major                    OS/Version: All                     |
+ |     Priority: High                      Component: JAXP                    |
+ +----------------------------------------------------------------------------+
+ |  Assigned To: xerces-j-dev@xml.apache.org                                  |
+ |  Reported By: igor@widespace.ee                                            |
+ |      CC list: Cc:                                                          |
+ +----------------------------------------------------------------------------+
+ |          URL:                                                              |
+ +============================================================================+
+ |                              DESCRIPTION                                   |
+ Xerces does not catch security exeptions for System.getProperty() calls, and 
+ because of it Xerces cannot be used in WebStart applicatios.
+ 
+ All System.getProperty() calls should be wrapped to try-catch blocks
+ handling SecurityExceptions and assigning default values!

---------------------------------------------------------------------
To unsubscribe, e-mail: xerces-j-dev-unsubscribe@xml.apache.org
For additional commands, e-mail: xerces-j-dev-help@xml.apache.org