[jira] [Created] (HADOOP-12126) Configuration might use ApplicationClassLoader to create XML parser

["Laurent Goujon (JIRA)" <ji...@apache.org>]

Laurent Goujon created HADOOP-12126:
---------------------------------------

             Summary: Configuration might use ApplicationClassLoader to create XML parser
                 Key: HADOOP-12126
                 URL: https://issues.apache.org/jira/browse/HADOOP-12126
             Project: Hadoop Common
          Issue Type: Bug
          Components: conf
            Reporter: Laurent Goujon


{{org.apache.hadoop.conf.Configuration}} creates a new DocumentBuilder to parse the XML config files, but it doesn't specify which classloader to use to discover and instantiate the XML parser.

Because DocumentBuilderFactory relies on ServiceProvider, whose by default, uses the context classloader. If classpath isolation is turned on, one might expect that that Configuration will only load classes from the system classloader, but it turns out that the context classloader is set to ApplicationClassLoader, and that a XML parser might be loaded from the user classpath.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)