aruny 2004/02/12 02:01:12
Modified: java/src/org/apache/xalan/extensions Tag:
jaxp12112003_branch ExtensionHandler.java
ExtensionHandlerGeneral.java
Added: java/src/org/apache/xalan/extensions Tag:
jaxp12112003_branch ObjectFactory.java
SecuritySupport.java SecuritySupport12.java
Log:
ObjectFactory class exposes class loaders publicly which allow untrusted code
to access internal classes. Making following changes to fix it.
1.Duplicating the ObjectFactory, SecuritySupport.java and
SecuritySupport12.java class in order to make it package private in each of the
packages that require its services.
2.Using checkPackageAccess() to prevent access to internal packages of
jdk(sun.*).
Revision Changes Path
No revision
No revision
1.19.2.1 +1 -1
xml-xalan/java/src/org/apache/xalan/extensions/ExtensionHandler.java
Index: ExtensionHandler.java
===================================================================
RCS file:
/home/cvs/xml-xalan/java/src/org/apache/xalan/extensions/ExtensionHandler.java,v
retrieving revision 1.19
retrieving revision 1.19.2.1
diff -u -r1.19 -r1.19.2.1
--- ExtensionHandler.java 17 Oct 2003 20:59:29 -0000 1.19
+++ ExtensionHandler.java 12 Feb 2004 10:01:12 -0000 1.19.2.1
@@ -65,7 +65,7 @@
import org.apache.xalan.templates.Stylesheet;
import org.apache.xalan.transformer.TransformerImpl;
import org.apache.xpath.functions.FuncExtFunction;
-import org.apache.xml.utils.ObjectFactory;
+
/**
* Abstract base class for handling an extension namespace for XPath.
1.21.2.1 +1 -1
xml-xalan/java/src/org/apache/xalan/extensions/ExtensionHandlerGeneral.java
Index: ExtensionHandlerGeneral.java
===================================================================
RCS file:
/home/cvs/xml-xalan/java/src/org/apache/xalan/extensions/ExtensionHandlerGeneral.java,v
retrieving revision 1.21
retrieving revision 1.21.2.1
diff -u -r1.21 -r1.21.2.1
--- ExtensionHandlerGeneral.java 17 Oct 2003 20:59:29 -0000 1.21
+++ ExtensionHandlerGeneral.java 12 Feb 2004 10:01:12 -0000 1.21.2.1
@@ -73,7 +73,7 @@
import org.apache.xalan.transformer.TransformerImpl;
import org.apache.xml.dtm.DTMIterator;
import org.apache.xml.dtm.ref.DTMNodeList;
-import org.apache.xml.utils.ObjectFactory;
+
import org.apache.xml.utils.StringVector;
import org.apache.xml.utils.SystemIDResolver;
import org.apache.xpath.XPathProcessorException;
No revision
Index: ExtensionHandlerGeneral.java
===================================================================
RCS file:
/home/cvs/xml-xalan/java/src/org/apache/xalan/extensions/ExtensionHandlerGeneral.java,v
retrieving revision 1.21
retrieving revision 1.21.2.1
diff -u -r1.21 -r1.21.2.1
--- ExtensionHandlerGeneral.java 17 Oct 2003 20:59:29 -0000 1.21
+++ ExtensionHandlerGeneral.java 12 Feb 2004 10:01:12 -0000 1.21.2.1
@@ -73,7 +73,7 @@
import org.apache.xalan.transformer.TransformerImpl;
import org.apache.xml.dtm.DTMIterator;
import org.apache.xml.dtm.ref.DTMNodeList;
-import org.apache.xml.utils.ObjectFactory;
+
import org.apache.xml.utils.StringVector;
import org.apache.xml.utils.SystemIDResolver;
import org.apache.xpath.XPathProcessorException;
No revision
Index: ExtensionHandlerGeneral.java
===================================================================
RCS file:
/home/cvs/xml-xalan/java/src/org/apache/xalan/extensions/ExtensionHandlerGeneral.java,v
retrieving revision 1.21
retrieving revision 1.21.2.1
diff -u -r1.21 -r1.21.2.1
--- ExtensionHandlerGeneral.java 17 Oct 2003 20:59:29 -0000 1.21
+++ ExtensionHandlerGeneral.java 12 Feb 2004 10:01:12 -0000 1.21.2.1
@@ -73,7 +73,7 @@
import org.apache.xalan.transformer.TransformerImpl;
import org.apache.xml.dtm.DTMIterator;
import org.apache.xml.dtm.ref.DTMNodeList;
-import org.apache.xml.utils.ObjectFactory;
+
import org.apache.xml.utils.StringVector;
import org.apache.xml.utils.SystemIDResolver;
import org.apache.xpath.XPathProcessorException;
1.1.2.1 +665 -0
xml-xalan/java/src/org/apache/xalan/extensions/Attic/ObjectFactory.java
1.1.2.1 +159 -0
xml-xalan/java/src/org/apache/xalan/extensions/Attic/SecuritySupport.java
1.1.2.1 +180 -0
xml-xalan/java/src/org/apache/xalan/extensions/Attic/SecuritySupport12.java
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
