[GitHub] [commons-jxpath] kyakdan commented on pull request #26: Add an allow list for classes that can be loaded by JXPath

["kyakdan (via GitHub)" <gi...@apache.org>]

kyakdan commented on PR #26:
URL: https://github.com/apache/commons-jxpath/pull/26#issuecomment-1473568115

   > @kyakdan in the current form, every class requested from ClassLoaderUtil needs to be whitelisted. This means that by default, even basic methods like JXPathContext.newContext() will fail (as org.apache.commons.jxpath.ri.JXPathContextFactoryReferenceImpl will be filtered by default) Is this intended behaviour?
   
   You can provide a pattern to allow a group of classes, e.g., `org.w3c.*`. This allows all classes in the `org.w3c` package. You can use `*` as a pattern to allow everything which matches the current behavior.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@commons.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org