You are viewing a plain text version of this content. The canonical link for it is here.
Posted to axis-cvs@ws.apache.org by sc...@apache.org on 2008/03/12 16:12:22 UTC
svn commit: r636358 - in
/webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing:
SubmissionEndpointReference.java
factory/impl/JAXWSEndpointReferenceFactoryImpl.java
Author: scheu
Date: Wed Mar 12 08:12:20 2008
New Revision: 636358
URL: http://svn.apache.org/viewvc?rev=636358&view=rev
Log:
Quick Fix for Java 2 Security problem with JAXBContext construction
Contributor:Rich Scheuerle
Found by: Wen Hsu
Modified:
webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/SubmissionEndpointReference.java
webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/factory/impl/JAXWSEndpointReferenceFactoryImpl.java
Modified: webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/SubmissionEndpointReference.java
URL: http://svn.apache.org/viewvc/webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/SubmissionEndpointReference.java?rev=636358&r1=636357&r2=636358&view=diff
==============================================================================
--- webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/SubmissionEndpointReference.java (original)
+++ webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/SubmissionEndpointReference.java Wed Mar 12 08:12:20 2008
@@ -18,11 +18,15 @@
*/
package org.apache.axis2.jaxws.addressing;
+import org.apache.axis2.java.security.AccessController;
+
+import java.security.PrivilegedExceptionAction;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import javax.xml.bind.JAXBContext;
+import javax.xml.bind.JAXBException;
import javax.xml.bind.Marshaller;
import javax.xml.bind.Unmarshaller;
import javax.xml.bind.annotation.XmlAccessType;
@@ -42,6 +46,7 @@
import javax.xml.transform.Source;
import javax.xml.ws.EndpointReference;
import javax.xml.ws.WebServiceException;
+import javax.xml.ws.wsaddressing.W3CEndpointReference;
/**
* <p>Java class for EndpointReferenceType complex type.
@@ -98,7 +103,14 @@
static {
try {
- jaxbContext = JAXBContext.newInstance(SubmissionEndpointReference.class);
+ jaxbContext =(JAXBContext)
+ AccessController.doPrivileged(
+ new PrivilegedExceptionAction() {
+
+ public Object run() throws JAXBException {
+ return JAXBContext.newInstance(SubmissionEndpointReference.class);
+ }
+ });
}
catch (Exception e) {
//TODO NLS enable
Modified: webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/factory/impl/JAXWSEndpointReferenceFactoryImpl.java
URL: http://svn.apache.org/viewvc/webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/factory/impl/JAXWSEndpointReferenceFactoryImpl.java?rev=636358&r1=636357&r2=636358&view=diff
==============================================================================
--- webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/factory/impl/JAXWSEndpointReferenceFactoryImpl.java (original)
+++ webservices/axis2/trunk/java/modules/jaxws/src/org/apache/axis2/jaxws/addressing/factory/impl/JAXWSEndpointReferenceFactoryImpl.java Wed Mar 12 08:12:20 2008
@@ -26,8 +26,11 @@
import javax.xml.ws.WebServiceException;
import javax.xml.ws.wsaddressing.W3CEndpointReference;
+import java.security.PrivilegedExceptionAction;
+
import org.apache.axis2.addressing.AddressingConstants.Final;
import org.apache.axis2.addressing.AddressingConstants.Submission;
+import org.apache.axis2.java.security.AccessController;
import org.apache.axis2.jaxws.ExceptionFactory;
import org.apache.axis2.jaxws.addressing.SubmissionEndpointReference;
import org.apache.axis2.jaxws.addressing.factory.JAXWSEndpointReferenceFactory;
@@ -49,8 +52,15 @@
super();
try {
- jaxbContext = JAXBContext.newInstance(W3CEndpointReference.class,
- SubmissionEndpointReference.class);
+ jaxbContext =(JAXBContext)
+ AccessController.doPrivileged(
+ new PrivilegedExceptionAction() {
+
+ public Object run() throws JAXBException {
+ return JAXBContext.newInstance(W3CEndpointReference.class,
+ SubmissionEndpointReference.class);
+ }
+ });
}
catch (Exception e) {
//TODO NLS enable
---------------------------------------------------------------------
To unsubscribe, e-mail: axis-cvs-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-cvs-help@ws.apache.org