|
From: Weinan Li <we...@re...> - 2015-08-03 08:44:23
|
I have confirmed this problem under jdk1.8 and created jira issues to track it: https://issues.jboss.org/browse/RESTEASY-1207 https://issues.jboss.org/browse/RESTEASY-1208 I’ll work on fixes this week. -- Weinan Li / JBoss > On May 12, 2015, at 2:48 AM, Ron Sigal <rs...@re...> wrote: > > Hi Alexandre, > > My turn to apologize for delay. > > The interesting thing in the surefire report is the line: > > org.jboss.resteasy.spi.ReaderException: org.xml.sax.SAXParseException; lineNumber: 5; columnNumber: 15; External Entity: Failed to read external document 'testpasswd', because 'file' access is not allowed due to restriction set by the accessExternalDTD property. > > By default, the "accessExternalDTD" property should be set to "all"; i.e., there should be no restriction. > > 1. Is there any chance the system property "javax.xml.accessExternalDTD" is set in your environment? > 2. Could you verify which version of Xerces is getting called? > > Thanks, > Ron > > On 03/23/2015 06:53 AM, Alexandre Kieling wrote: >> Hi Ron, >> >> Sorry for the delay. The surefire report is attached. >> >> Cheers, >> Alex >> >> On Fri, Mar 13, 2015 at 11:30 PM, Ron Sigal <rs...@re...> wrote: >> The security features of Xerces are a moving target. Could you attach the surefire report file TEST-org.jboss.resteasy.test.xxe.TestSecureProcessing.xml? >> >> Thanks, >> Ron >> >> >> On 02/27/2015 01:44 PM, Alexandre Kieling wrote: >>> I'm new to the project but will try to fix the broken tests. >>> >>> Is the project integrated with a CI service? >>> >>> Alexandre Kieling >>> >>> On Wed, Feb 25, 2015 at 8:07 PM, Konstantin Gribov <gr...@gm...> wrote: >>> Oh, sorry. >>> >>> It'll fail build on JDK 1.8 after these tests. I'm currently building with `-DskipTests=true`. >>> >>> -- >>> Best regards, >>> Konstantin Gribov >>> >>> Thu Feb 26 2015 at 2:02:38, Konstantin Gribov <gr...@gm...>: >>> >>> Hi, Alexandre. >>> >>> JDK 1.8 breaks ant scriptlets because script engine changed from `rhino` to `nashorn`, see [1]. >>> It builds fine on JDK 1.7 with fixes from my other PR on github [2]. >>> >>> [1]: https://github.com/resteasy/Resteasy/pull/625/files >>> [2]: https://github.com/resteasy/Resteasy/pull/624/files >>> >>> -- >>> Best regards, >>> Konstantin Gribov >>> >>> Wed Feb 25 2015 at 23:07:19, Alexandre Kieling <ale...@gm...>: >>> >>> Hi, >>> >>> I have forked and cloned the Resteasy repository. When I run 'mvn install', the following tests fail: >>> >>> Failed tests: >>>  TestSecureProcessing.testSecurityDefaultDTDsFalseExpansionDefault:136->doTestFailsFailsPassesFails:318->doExternalEntityExpansionFails:437 expected:<200> but was:<400> >>>  TestSecureProcessing.testSecurityDefaultDTDsFalseExpansionFalse:143->doTestFailsFailsPassesFails:318->doExternalEntityExpansionFails:437 expected:<200> but was:<400> >>>  TestSecureProcessing.testSecurityDefaultDTDsFalseExpansionTrue:150->doTestFailsFailsPassesPasses:326->doExternalEntityExpansionPasses:451 expected:<200> but was:<400> >>>  TestSecureProcessing.testSecurityTrueDTDsFalseExpansionDefault:262->doTestFailsFailsPassesFails:318->doExternalEntityExpansionFails:437 expected:<200> but was:<400> >>>  TestSecureProcessing.testSecurityTrueDTDsFalseExpansionFalse:269->doTestFailsFailsPassesFails:318->doExternalEntityExpansionFails:437 expected:<200> but was:<400> >>>  TestSecureProcessing.testSecurityTrueDTDsFalseExpansionTrue:276->doTestFailsFailsPassesPasses:326->doExternalEntityExpansionPasses:451 expected:<200> but was:<400> >>>  TestXXE.testXXEWithoutExpansion:89 expected:<204> but was:<400> >>>  TestXXE.testXXEWithExpansion:109 expected:<200> but was:<400> >>>  TestIIOImageProvider.testPostJPEGIMage:81 >>> >>> Tests run: 676, Failures: 9, Errors: 0, Skipped: 2 >>> >>> [INFO] RESTEasy JAX-RS Implementation .................... FAILURE [37.896s] >>> >>> >>> I'm using JDK 8 on Linux and have installed Java Cryptography Extension. >>> >>> Is there anything I'm missing? >>> >>> Thanks, >>> Alexandre Kieling >>> ------------------------------------------------------------------------------ >>> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >>> by Intel and developed in partnership with Slashdot Media, is your hub for all >>> things parallel software development, from weekly thought leadership blogs to >>> news, videos, case studies, tutorials and more. Take a look and join the >>> conversation now. http://goparallel.sourceforge.net/_______________________________________________ >>> Resteasy-developers mailing list >>> Res...@li... >>> https://lists.sourceforge.net/lists/listinfo/resteasy-developers >>> >>> >>> >>> ------------------------------------------------------------------------------ >>> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >>> by Intel and developed in partnership with Slashdot Media, is your hub for all >>> things parallel software development, from weekly thought leadership blogs to >>> news, videos, case studies, tutorials and more. Take a look and join the >>> conversation now. >>> http://goparallel.sourceforge.net/ >>> >>> >>> _______________________________________________ >>> Resteasy-developers mailing list >>> >>> Res...@li... >>> https://lists.sourceforge.net/lists/listinfo/resteasy-developers >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub for all >> things parallel software development, from weekly thought leadership blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ >> _______________________________________________ >> Resteasy-developers mailing list >> Res...@li... >> https://lists.sourceforge.net/lists/listinfo/resteasy-developers >> >> > > ------------------------------------------------------------------------------ > One dashboard for servers and applications across Physical-Virtual-Cloud > Widest out-of-the-box monitoring support with 50+ applications > Performance metrics, stats and reports that give you Actionable Insights > Deep dive visibility with transaction tracing using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y_______________________________________________ > Resteasy-developers mailing list > Res...@li... > https://lists.sourceforge.net/lists/listinfo/resteasy-developers |