RFR: JAXP 1.5 for JDK8/7u40: 8016648: FEATURE_SECURE_PROCESSING set to true or false causes SAXParseException to be thrown
huizhe.wang at oracle.com
Mon Jul 1 08:09:23 UTC 2013
There have been two revisions in JAXP 1.5 specification: 1) the
relationship between the JAXP 1.5 properties and
FEATURE_SECURE_PROCESSING (FSP) is now a recommendation. It is up to the
implementation to decide if it wants to restrict when FSP is set. 2)
System properties will override that may have been set by FSP.
In the following patch, a JDK version detection code is added so that
when FSP is set explicitly, for JDK7, there will be no restrictions, but
for JDK8 and above, the restrictions are on.
The effective order is changed so that JAXP 1.5 defined system
properties will override that may be set by enabling FSP.
Note that the patch is identical for JDK7 and 8, and I plan to ask
approval for 7u40 integration.
More information about the core-libs-dev