[XALANJ-1094] Uncaught SecurityException for System.getProperty() call

• Type: Bug
• Status: Resolved
• Resolution: Fixed
• Affects Version/s: 2.4Dx
• Component/s: Serialization
• Environment: Operating System: Other; Platform: Other
• Bugzilla Id: 10839
• Assignee: Morris Kwan
• Reporter: Eddie Ruvinsky
• Created: 16/Jul/02 02:26
• Updated: 02/Sep/04 21:21
• Resolved: 02/Sep/04 21:21

Description

The method org.apache.xalan.serialize.Encodings.loadEncodingInfo() calls
System.getProperty() assuming that it has read access to it. This fails if a
SecurityManager is running and the code does not have read access to the
property. This case must be expected and handled. A simple try block around
the getProperty() call, and catching a SecurityException can do the trick.

Note that this is a critical bug because a basic transformation cannot be done
without getting a SecurityException.

Suggested code edit:

String urlString = null;
try

{ urlString = System.getProperty("org.apache.xalan.serialize.encodings"); }

catch (SecurityException e) {}