Dan Royer created XALANJ-2632:
---------------------------------
Summary: xalan-2.7.2.jar provides class org.apache.bsf.BSFManager
not in module
Key: XALANJ-2632
URL: https://issues.apache.org/jira/browse/XALANJ-2632
Project: XalanJ2
Issue Type: Bug
Security Level: No security risk; visible to anyone (Ordinary problems in
Xalan projects. Anybody can view the issue.)
Components: Xalan
Affects Versions: 2.7.2
Environment: windows 10 + IntelliJ
Reporter: Dan Royer
Assignee: Gary D. Gregory
*Problem:*
xalan-2.7.2.jar from maven central has a
_META-INF/services/org.apache.xalan.extensions.bsf.BSFManager_ file declaring
_org.apache.bsf.BSFManager_ as a provider ... but org.apache.bsf doesn't exist
in the JAR.
*Expected:*
declared implementation to exist in the JAR.
*Workarounds:*
unknown
*Additional Context:*
My project has been using BATIK to load SVGs, [with
difficulties|https://github.com/MarginallyClever/Makelangelo-software/issues?q=is%3Aissue+is%3Aopen+label%3ASVG].
We're trying instead EchoSVG, a fork of BATIK trying to get around some bugs
we're facing. This, in turn, causes an exception at boot.
{code:java}
Error occurred during initialization of boot layer
java.lang.module.FindException: Unable to derive module descriptor for
C:\Users\aggra\.m2\repository\xalan\xalan\2.7.2\xalan-2.7.2.jar
Caused by: java.lang.module.InvalidModuleDescriptorException: Provider class
org.apache.bsf.BSFManager not in module{code}
Which is how I found the issue.
Also, xalan-2.7.2 on Maven Central lists [several
vulnerabilities|[https://mvnrepository.com/artifact/xalan/xalan/2.7.2].] Is an
update in the works?
Thank you!
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
