You are viewing a plain text version of this content. The canonical link for it is here.
Posted to j-users@xalan.apache.org by Clement Mathieu <cl...@activeeon.com> on 2011/04/04 15:54:13 UTC
XSLT extension functions with a security manager
Hi,
Is it still possible to use XSLT java extension functions when a
security manager is set ?
According to the JAXP 1.3 documentation and my experimentations with
OpenJDK 6 and Oracle's JDK 7 when a security manager is set the
FEATURE_SECURE_PROCESSING is automatically set to true and it is no
longer possible to use extension functions nor to reset
FEATURE_SECURE_PROCESSING to false.
This behaviour breaks my application since it relies on a security
manager and uses java extension functions. How can I re-enable the
extension functions feature ?
Regards.
Re: XSLT extension functions with a security manager
Posted by Clement Mathieu <cl...@activeeon.com>.
On Mon, 4 Apr 2011 11:16:19 -0400
Michael Glavassevich <mr...@ca.ibm.com> wrote:
> That may be what the Oracle JDK is doing, but it isn't mentioned
> anywhere in the JAXP specification and sounds like a backward
> incompatible change that they've introduced to their implementation.
> I doubt Apache Xalan would have adopted that behaviour.
You are right. I was assuming that Apache and Oracle implementations
would have the same behaviour (shame on me I didn't run the test).
According to the source code and to my tests, only the Oracle
implementation is affected by this issue. Indeed it is a backward
incompatible change...
Regards.
Re: XSLT extension functions with a security manager
Posted by Michael Glavassevich <mr...@ca.ibm.com>.
That may be what the Oracle JDK is doing, but it isn't mentioned anywhere
in the JAXP specification and sounds like a backward incompatible change
that they've introduced to their implementation. I doubt Apache Xalan would
have adopted that behaviour.
Thanks.
Michael Glavassevich
XML Parser Development
IBM Toronto Lab
E-mail: mrglavas@ca.ibm.com
E-mail: mrglavas@apache.org
Clement Mathieu <cl...@activeeon.com> wrote on 04/04/2011
09:54:13 AM:
> Hi,
>
> Is it still possible to use XSLT java extension functions when a
> security manager is set ?
>
> According to the JAXP 1.3 documentation and my experimentations with
> OpenJDK 6 and Oracle's JDK 7 when a security manager is set the
> FEATURE_SECURE_PROCESSING is automatically set to true and it is no
> longer possible to use extension functions nor to reset
> FEATURE_SECURE_PROCESSING to false.
>
> This behaviour breaks my application since it relies on a security
> manager and uses java extension functions. How can I re-enable the
> extension functions feature ?
>
> Regards.