BSF is a package separately available from Apache; if you aren't actively using it I think it's safe to consider it optional.

As far as I know, Xalan is not currently being actively maintained. I've been considering putting some time into it.

--
Sent from palmtop; apologies for any auto-incorrections.
() | Text Mail Campaign
/\ | HTML mail is _evil_!

On Apr 8, 2022 11:45 AM, "Dan Royer (Jira)" <[email protected]> wrote:


     [ https://issues.apache.org/jira/browse/XALANJ-2632?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dan Royer updated XALANJ-2632:
------------------------------
    Description:
 

*Problem:*

xalan-2.7.2.jar from maven central has a _META-INF/services/org.apache.xalan.extensions.bsf.BSFManager_ file declaring _org.apache.bsf.BSFManager_ as a provider ... but org.apache.bsf doesn't exist in the JAR.

*Expected:*

declared implementation to exist in the JAR.

*Workarounds:*

unknown

*Additional Context:*

My project has been using BATIK to load SVGs, [with difficulties|https://github.com/MarginallyClever/Makelangelo-software/issues?q=is%3Aissue+is%3Aopen+label%3ASVG].  We're trying instead EchoSVG, a fork of BATIK trying to get around some bugs we're facing.  This, in turn, causes an exception at boot.
{code:java}
Error occurred during initialization of boot layer
java.lang.module.FindException: Unable to derive module descriptor for C:\Users\aggra\.m2\repository\xalan\xalan\2.7.2\xalan-2.7.2.jar
Caused by: java.lang.module.InvalidModuleDescriptorException: Provider class org.apache.bsf.BSFManager not in module{code}
Which is how I found the issue.

Also, xalan-2.7.2 on Maven Central lists [several vulnerabilities|https://mvnrepository.com/artifact/xalan/xalan/2.7.2]  Is an update in the works?

 

Thank you!

  was:
 

*Problem:*

xalan-2.7.2.jar from maven central has a _META-INF/services/org.apache.xalan.extensions.bsf.BSFManager_ file declaring _org.apache.bsf.BSFManager_ as a provider ... but org.apache.bsf doesn't exist in the JAR.

*Expected:*

declared implementation to exist in the JAR.

*Workarounds:*

unknown

*Additional Context:*

My project has been using BATIK to load SVGs, [with difficulties|https://github.com/MarginallyClever/Makelangelo-software/issues?q=is%3Aissue+is%3Aopen+label%3ASVG].  We're trying instead EchoSVG, a fork of BATIK trying to get around some bugs we're facing.  This, in turn, causes an exception at boot.
{code:java}
Error occurred during initialization of boot layer
java.lang.module.FindException: Unable to derive module descriptor for C:\Users\aggra\.m2\repository\xalan\xalan\2.7.2\xalan-2.7.2.jar
Caused by: java.lang.module.InvalidModuleDescriptorException: Provider class org.apache.bsf.BSFManager not in module{code}
Which is how I found the issue.

Also, xalan-2.7.2 on Maven Central lists [several vulnerabilities|[https://mvnrepository.com/artifact/xalan/xalan/2.7.2]]  Is an update in the works?

 

Thank you!


> xalan-2.7.2.jar provides class org.apache.bsf.BSFManager not in module
> ----------------------------------------------------------------------
>
>                 Key: XALANJ-2632
>                 URL: https://issues.apache.org/jira/browse/XALANJ-2632
>             Project: XalanJ2
>          Issue Type: Bug
>      Security Level: No security risk; visible to anyone(Ordinary problems in Xalan projects.  Anybody can view the issue.)
>          Components: Xalan
>    Affects Versions: 2.7.2
>         Environment: windows 10 + IntelliJ
>            Reporter: Dan Royer
>            Assignee: Gary D. Gregory
>            Priority: Major
>
>  
> *Problem:*
> xalan-2.7.2.jar from maven central has a _META-INF/services/org.apache.xalan.extensions.bsf.BSFManager_ file declaring _org.apache.bsf.BSFManager_ as a provider ... but org.apache.bsf doesn't exist in the JAR.
> *Expected:*
> declared implementation to exist in the JAR.
> *Workarounds:*
> unknown
> *Additional Context:*
> My project has been using BATIK to load SVGs, [with difficulties|https://github.com/MarginallyClever/Makelangelo-software/issues?q=is%3Aissue+is%3Aopen+label%3ASVG].  We're trying instead EchoSVG, a fork of BATIK trying to get around some bugs we're facing.  This, in turn, causes an exception at boot.
> {code:java}
> Error occurred during initialization of boot layer
> java.lang.module.FindException: Unable to derive module descriptor for C:\Users\aggra\.m2\repository\xalan\xalan\2.7.2\xalan-2.7.2.jar
> Caused by: java.lang.module.InvalidModuleDescriptorException: Provider class org.apache.bsf.BSFManager not in module{code}
> Which is how I found the issue.
> Also, xalan-2.7.2 on Maven Central lists [several vulnerabilities|https://mvnrepository.com/artifact/xalan/xalan/2.7.2]  Is an update in the works?
>  
> Thank you!



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


Reply via email to