https://saxonica.plan.io/https://saxonica.plan.io/favicon.ico2021-10-26T11:43:04ZSaxonica Developer CommunitySaxon - Bug #5145: Logging of unsupported ACCESS_EXTERNAL_DTD when transforming through a JAXBSourcehttps://saxonica.plan.io/issues/5145?journal_id=187172021-10-26T11:43:04ZMichael Kaymike@saxonica.com
<ul></ul><p>My immediate reaction is that if the application is trying to restrict access to DTDs, and the chosen XML parser ignores this (which presumably means that it will fetch the DTD despite the attempt to disallow it), then a warning is entirely appropriate.</p>
<p>I appreciate that this is caused by a conflict between off-the-shelf components that we're not able to change, but I don't think it's right to pretend that this conflict doesn't exist.</p> Saxon - Bug #5145: Logging of unsupported ACCESS_EXTERNAL_DTD when transforming through a JAXBSourcehttps://saxonica.plan.io/issues/5145?journal_id=187192021-10-26T13:25:17ZMário Martinho Dias
<ul></ul><p>The issue is that the "chosen" XML parser is the same, I didn't change it. The only difference in the unit tests is the <code>TransformerFactory</code> implementation, default vs Saxon. But maybe something else is escaping me...</p> Saxon - Bug #5145: Logging of unsupported ACCESS_EXTERNAL_DTD when transforming through a JAXBSourcehttps://saxonica.plan.io/issues/5145?journal_id=187482021-10-31T18:13:57ZMichael Kaymike@saxonica.com
<ul><li><strong>Category</strong> set to <i>JAXP Java API</i></li><li><strong>Status</strong> changed from <i>New</i> to <i>Rejected</i></li><li><strong>Assignee</strong> set to <i>Michael Kay</i></li></ul><p>I'm afraid we're seeing a lot of configuration issues in this area, because different parts of the XML jigsaw (even parts contained within the JDK) have advanced at different rates. Saxon is caught up in the middle here. The JAXP spec changed in JAXP 1.5 to require components to "support" some standard security-related properties such as <code>ACCESS_EXTERNAL_DTD</code> -- including in this case an XSLT processor, which can't do anything with this property other than pass it on to an XML parser. The spec doesn't say what "support" means, but in my book it means it should accept the property and do its best to make sure that it has the intended effect, and if it finds that the underlying parser takes no notice, that merits at least a warning.</p>
<p>Sorry, but I think Saxon is doing the right thing here. Not a bug,</p>