We've upgraded our application from Java 11 to Java 21 and ran into a
couple of cases in which transformation of a Velocity template using
generic tools caused an error due to the increased security.

For example, a customer used Date Tool's `getTimezone` to get a TimeZone
object and then `Timezone.getTimezone(String)` to get a specific TimeZone
by a ZoneId string, which uses ZoneInfo behind the scenes. The fix was to
introduce `--add-opens=java.base/sun.util.calendar=ALL-UNNAMED` JVM param
for allowing the package.

I see the latest Generic Tools, specifically the Date Tool does not have
recent changes so the same could have occurred after upgrading the tools.
We are wondering if there are plans for improved Java 21 support and/or
best practices for avoiding these issues.

Thank you in advance.

Reply via email to