You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Andreas Veithen (JIRA)" <ji...@apache.org> on 2012/12/20 11:51:12 UTC
[jira] [Reopened] (AXIOM-62) Java2Security Error. StAXUtils needs
a AccessController code.
[ https://issues.apache.org/jira/browse/AXIOM-62?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andreas Veithen reopened AXIOM-62:
----------------------------------
Assignee: Andreas Veithen (was: Rich Scheuerle)
I'm reopening this issue. As noted in the description, this is actually an issue with the underlying StAX implementation. On the other hand, executing createXMLStream(Reader|Writer) with doPrivileged causes unnecessary overhead and is questionable from a security point of view because it may give the code that calls StAXUtils privileges it is not expected to have.
> Java2Security Error. StAXUtils needs a AccessController code.
> --------------------------------------------------------------
>
> Key: AXIOM-62
> URL: https://issues.apache.org/jira/browse/AXIOM-62
> Project: Axiom
> Issue Type: Bug
> Reporter: Rich Scheuerle
> Assignee: Andreas Veithen
>
> Problem:
> StAXUtils.createXMLStreamReader(...) and StAXUtils.createXMLStreamWriter(...) methods call out to the plugged in stax implementation. Brent Ulbricht discovered a J2S
> exception in a non-woodstox parser.
> Solution:
> I am pursuing a fix with the one of the owners of the parser. In addition, I am using this JIRA to do surround the code in a AccessController.doPriv block. This solution is consistent with pre-existing code in doPriv code in StAXUtils.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org