Skip to content

Commit

Permalink
changes description of jaxp-compat and jaxp-strict after discussing w…
Browse files Browse the repository at this point in the history
…ith Lance
  • Loading branch information
JoeWang-Java committed Apr 19, 2024
1 parent e638601 commit 019c2ae
Show file tree
Hide file tree
Showing 2 changed files with 26 additions and 28 deletions.
27 changes: 13 additions & 14 deletions src/java.xml/share/conf/jaxp-compat.properties
Original file line number Diff line number Diff line change
Expand Up @@ -8,20 +8,19 @@
# jaxp.properties: this is the default configuration that the JDK uses to set
# property values when XML factories are initiated.
#
# jaxp-strict.properties: this file resembles what will become the Secure-By-Default
# configuration where a strict restriction is the default. This file allows
# deployments to test the more secure/strict behavior, identify issues such as
# a processor unknowingly makes outbound network connections to fetch DTD,
# or processes XML that relies on extension functions
#
# jaxp-compat.properties: this file can be used to regain compatibility once the
# JDK has switched to a strict configuration as indicated in jaxp-strict.properties.
# This configuration contains the same properties as those in jaxp-strict.properties
# except it sets them back to the current status of the JDK. Note that, although
# this means getting back to the current configuration, this file is different
# from the default `jaxp.properties` in that it contains exactly the same properties
# as in jaxp-strict.properties while `jaxp.properties` has fewer property settings
# and leaves the majority of the properties to their default values.
# jaxp-strict.properties: this property file provides settings that will be
# equivalent to what will be the default JAXP settings in a future release to
# make the use of JAXP more secure by default. This file allows deployments to
# test the more secure/strict behavior, identify issues such as a processor
# unknowingly makes outbound network connections to fetch DTD, or processes XML
# that relies on extension functions
#
# jaxp-compat.properties: this configuration specifies the property values that
# are the same as the properties' default values. It can be used to regain
# compatibility from a more strict configuration in a future release.
# The difference from the default `jaxp.properties` is that it contains additional
# properties that were not included in jaxp.properties, setting them to their
# default values.
#
# In this configuration, properties that have more restrictive settings as in the
# strict configuration (jaxp-strict.properties) are reversed back to their
Expand Down
27 changes: 13 additions & 14 deletions src/java.xml/share/conf/jaxp-strict.properties
Original file line number Diff line number Diff line change
Expand Up @@ -6,20 +6,19 @@
# jaxp.properties: this is the default configuration that the JDK uses to set
# property values when XML factories are initiated.
#
# jaxp-strict.properties: this file resembles what will become the Secure-By-Default
# configuration where a strict restriction is the default. This file allows
# deployments to test the more secure/strict behavior, identify issues such as
# a processor unknowingly makes outbound network connections to fetch DTD,
# or processes XML that relies on extension functions
#
# jaxp-compat.properties: this file can be used to regain compatibility once the
# JDK has switched to a strict configuration as indicated in jaxp-strict.properties.
# This configuration contains the same properties as those in jaxp-strict.properties
# except it sets them back to the current status of the JDK. Note that, although
# this means getting back to the current configuration, this file is different
# from the default `jaxp.properties` in that it contains exactly the same properties
# as in jaxp-strict.properties while `jaxp.properties` has fewer property settings
# and leaves the majority of the properties to their default values.
# jaxp-strict.properties: this property file provides settings that will be
# equivalent to what will be the default JAXP settings in a future release to
# make the use of JAXP more secure by default. This file allows deployments to
# test the more secure/strict behavior, identify issues such as a processor
# unknowingly makes outbound network connections to fetch DTD, or processes XML
# that relies on extension functions
#
# jaxp-compat.properties: this configuration specifies the property values that
# are the same as the properties' default values. It can be used to regain
# compatibility from a more strict configuration in a future release.
# The difference from the default `jaxp.properties` is that it contains additional
# properties that were not included in jaxp.properties, setting them to their
# default values.
#
# This file, jaxp-strict.properties represents more restrictive settings than the
# default jaxp.properties. In particular:
Expand Down

0 comments on commit 019c2ae

Please sign in to comment.