Uploaded image for project: 'OpenEJB'
  1. OpenEJB
  2. OPENEJB-968

XML system entities do not work

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.0, 3.1
    • Fix Version/s: None
    • Component/s: configuration, tomee
    • Labels:
      None

      Description

      NamespaceFilter used to disable DTD downloading in JaxB also disables SYSTEM entity references in the XML. For example, the following will cause a null pointer exception in the tomcat integration:

      <?xml version="1.0" encoding="ISO-8859-1"?>
      <!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
      "http://java.sun.com/j2ee/dtds/web-app_2.3.dtd" [
      <!ENTITY inclusionFile SYSTEM "file.xml" >
      ]
      >
      <web-app>
      &inclusionFile;
      </web-app>

      This problem exists in all JaxB parsing code.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              dain Dain Sundstrom
            • Votes:
              1 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated: