[XERCESC-1698] XMLURL class prevents SSL-capable NetAccessors

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 3.0.0
• Component/s: Miscellaneous
• Assignee: Alberto Massari
• Reporter: Scott Cantor
• Created: 04/May/07 02:01
• Updated: 12/Mar/18 03:02
• Resolved: 22/Jan/08 17:57

Description

Despite the addition of a libcurl-based NetAccessor, which can handle https:// URLs, the XMLURL class prevents it from getting a chance to run when parsing because it hardcodes the allowable protocols.

This seems like a design flaw. If URL parsing really requires hardcoding specific protocols and ports, it should be a "known" protocol list, not a list that automatically blocks unknown protocols. If that isn't possible, then https should be added at a minimum.

It's not the XMLURL class' job to know what a NetAccessor can handle. If some kind of capability API is needed, then it should be added to the NetAccessor interface so the XMLURL class can ask it whether a given protocol will work.