You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@xalan.apache.org by "Michael Glavassevich (JIRA)" <xa...@xml.apache.org> on 2007/12/11 18:05:44 UTC
[jira] Commented: (XALANJ-2341) [PATCH]: AccessController should be
used when querying system properties
[ https://issues.apache.org/jira/browse/XALANJ-2341?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12550636 ]
Michael Glavassevich commented on XALANJ-2341:
----------------------------------------------
Quite certain that I verified this a year ago before the serializer.jar from Xalan 2.7.1 went out in Xerces 2.9.0.
> [PATCH]: AccessController should be used when querying system properties
> ------------------------------------------------------------------------
>
> Key: XALANJ-2341
> URL: https://issues.apache.org/jira/browse/XALANJ-2341
> Project: XalanJ2
> Issue Type: Improvement
> Affects Versions: 2.7
> Reporter: Michael Glavassevich
> Assignee: Brian Minchau
> Fix For: 2.7.1
>
> Attachments: serializer-access-controller-patch.txt
>
>
> Now that Xalan has dropped support of JDK 1.1 it can now take full advantage of Java's security framework. An AccessController should be used when querying system properties. I see this is already being done (e.g. SecuritySupport) in some parts of Xalan already. The patch covers a couple places where the "line.separator" property is looked up.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: xalan-dev-unsubscribe@xml.apache.org
For additional commands, e-mail: xalan-dev-help@xml.apache.org