#18 XMLReaderFactory too fragile

closed-fixed
5
2001-09-29
2001-08-09
David Brownell
No

XMLReaderFactory is too fragile in the case of
security exceptions. It needs to more clearly
support (and encourage distributions to implement)
a compiled-in default.

For more info,see

http://www.geocrawler.com/lists/3/SourceForge/13179/0/6349248/

Discussion

  • Logged In: NO

    I am using tomcat server, and when so ever i start the
    servlet it gets intialised from the parameterts from the
    web.xml file which further takes the parameters and does
    its work, later then there is a call to command.xml where
    the command to the servlet is written ; what the servlet
    has to do....... the error which i see is

    axServlet: Error attempting to load parser into factory. -
    javax.xml.parsers.ParserConfigurationException: Namespace
    not supported by SAXParser
    at com.sun.xml.parser.SAXParserImpl.<init>
    (SAXParserImpl.java:60)
    at
    com.sun.xml.parser.SAXParserFactoryImpl.newSAXParser
    (SAXParserFactoryImpl.java:57)
    at SaxServlet.parseDocument(SaxServlet.java:67)
    at SaxServlet.doPost(SaxServlet.java:130)
    at javax.servlet.http.HttpServlet.service
    (HttpServlet.java:760)
    at javax.servlet.http.HttpServlet.service
    (HttpServlet.java:853)
    at org.apache.tomcat.core.ServletWrapper.doService
    (ServletWrapper.java:405)
    at org.apache.tomcat.core.Handler.service
    (Handler.java:287)
    at org.apache.tomcat.core.ServletWrapper.service
    (ServletWrapper.java:372)
    at
    org.apache.tomcat.core.ContextManager.internalService
    (ContextManager.java:812)
    at org.apache.tomcat.core.ContextManager.service
    (ContextManager.java:758)
    at
    org.apache.tomcat.service.http.HttpConnectionHandler.process
    Connection(HttpConnectionHandler.java:213)
    at org.apache.tomcat.service.TcpWorkerThread.runIt
    (PoolTcpEndpoint.java:416)
    at
    org.apache.tomcat.util.ThreadPool$ControlRunnable.run
    (ThreadPool.java:501)
    at java.lang.Thread.run(Thread.java:484)

    could anyone tell me the reason for this..#

     
  • David Brownell
    David Brownell
    2001-08-09

    Logged In: YES
    user_id=44117

    Re the unsigned comment dated 2001-08-09 00:20,
    it is a JAXP-related bug, not a SAX one, and also
    seems to be related to an old version of Crimson.
    (Which seems to have had SAX2 bugs ...)

    That is, XMLReaderFactory isn't used; that comment
    is NOT related to this bug.

     
  • David Brownell
    David Brownell
    2001-09-29

    • status: open --> closed-fixed
     
  • David Brownell
    David Brownell
    2001-09-29

    Logged In: YES
    user_id=44117

    Fixed. Documentation makes it clear that distros
    are expected to provide a compiled in default, and
    code shows where that should be.