Re: [Geoserver-users] FW: WMS broken after GeoServer Update (SAXException)

[Jody G. <jod...@gm...>]

What version and distribution of java do you have? The incompatibility may
be there ...

--
Jody Garnett


On Tue, Apr 23, 2024 at 3:26 AM Calliess Daniel Ing. <
Dan...@st...> wrote:

> Hi again,
>
>
>
> is there anybody who could tell if this is expected behaviour or a side
> effect of the introduction of the ENTITY_RESOLUTION_ALLOWLIST setting?
>
>
>
> Regards
> Daniel
>
>
>
>
>
> *From:* Calliess Daniel Ing.
> *Sent:* Montag, 22. April 2024 15:00
> *To:* geoserver-users <geo...@li...>
> *Subject:* WMS broken after GeoServer Update (SAXException)
>
>
>
> Hi,
>
>
>
> I updated my GeoServer (Tomcat 9/Windows Server) from 2.24.2 to 2.25.0 and
> now I can't preview WMS layers. The error message is:
> "java.lang.reflect.UndeclaredThrowableExceptionorg.xml.sax.SAXException:
> Entity resolution disallowed for null". The same message is shown when I
> try to validate an SLD stylesheet. I copied the full stack trace to a file
> and attached it to this message. I also reverted back to the data dir
> included in the 2.25.0 release and can reproduce the error f.e. with the
> 'point' style.
>
>
>
> I now found out that when I'm starting GeoServer with the
> -DENTITY_RESOLUTION_ALLOWLIST=* parameter, the error is gone. Although this
> parameter shouldn't be necessary because the styles are only containing
> references to www.opengis.net and www.w3.org which are in the default
> list of allowed domains for entity expansion according to the
> documentation
> <https://docs.geoserver.org/latest/en/user/production/config.html#production-config-external-entities>
> .
>
>
>
> The geoserver log shows a lot of "WARN   [geotools.xsd] - Sax parser
> property 'http://www.oracle.com/xml/jaxp/properties/entityExpansionLimit'
> not recognized.  Xerces version is incompatible." messages. Might there be
> a connection to the above issue?
>
>
>
> Am I doing something wrong?
>
>
>
> Thank you and best regards
> Daniel
> _______________________________________________
> Geoserver-users mailing list
>
> Please make sure you read the following two resources before posting to
> this list:
> - Earning your support instead of buying it, but Ian Turton:
> http://www.ianturton.com/talks/foss4g.html#/
> - The GeoServer user list posting guidelines:
> http://geoserver.org/comm/userlist-guidelines.html
>
> If you want to request a feature or an improvement, also see this:
> https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
>
>
> Geo...@li...
> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>