XalanJ2
  1. XalanJ2
  2. XALANJ-2341

[PATCH]: AccessController should be used when querying system properties

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 2.7
    • Fix Version/s: 2.7.1
    • Component/s: None
    • Labels:
      None
    • Xalan info:
      PatchAvailable

      Description

      Now that Xalan has dropped support of JDK 1.1 it can now take full advantage of Java's security framework. An AccessController should be used when querying system properties. I see this is already being done (e.g. SecuritySupport) in some parts of Xalan already. The patch covers a couple places where the "line.separator" property is looked up.

        Activity

        Hide
        Brian Minchau added a comment -

        I have reviewed, tested, approved, and applied Michael's patch in this issue.

        Thanks.

        Show
        Brian Minchau added a comment - I have reviewed, tested, approved, and applied Michael's patch in this issue. Thanks.
        Hide
        Brian Minchau added a comment -

        This issue is no longer relevant for 2.7.1, it is fixed in 2.7.1.
        Changing the affected version to 2.7.

        Show
        Brian Minchau added a comment - This issue is no longer relevant for 2.7.1, it is fixed in 2.7.1. Changing the affected version to 2.7.
        Hide
        Brian Minchau added a comment -

        Would the originator of this issue please verify that this issue is fixed in the 2.7.1 release, by adding a comment to this issue, so that we can close this issue.

        A lack of response by February 1, 2008 will be taken as consent that we can close this resolved issue.

        Regards,
        Brian Minchau

        Show
        Brian Minchau added a comment - Would the originator of this issue please verify that this issue is fixed in the 2.7.1 release, by adding a comment to this issue, so that we can close this issue. A lack of response by February 1, 2008 will be taken as consent that we can close this resolved issue. Regards, Brian Minchau
        Hide
        Michael Glavassevich added a comment -

        Quite certain that I verified this a year ago before the serializer.jar from Xalan 2.7.1 went out in Xerces 2.9.0.

        Show
        Michael Glavassevich added a comment - Quite certain that I verified this a year ago before the serializer.jar from Xalan 2.7.1 went out in Xerces 2.9.0.
        Hide
        Brian Minchau added a comment -

        Closing this issue.

        Show
        Brian Minchau added a comment - Closing this issue.

          People

          • Assignee:
            Brian Minchau
            Reporter:
            Michael Glavassevich
            Reviewer:
            Brian Minchau
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development