[Actionframework-users] ActionConfigEntityResolver.java is worse than doing nothing

[Mark D. A. <md...@di...>]

ActionConfigEntityResolver.java is severely broken:

1. It assumes that it will only be called for external entities that are DTD's,
which prevents other kinds of external entities.
It reports an error and returns null if systemId does not appear in its fixed list.

2. Even if it is a DTD, it does something which can't possibly work, which is
getClass().getResourceAsStream("/dtd/" + DTD). This can't work both because
the Class may not be the same as the application servlet instance, and because the
variable DTD is set to an http url elsewhere in the code.

-mda