Uploaded image for project: 'RESTEasy'
  1. RESTEasy
  2. RESTEASY-1964

SecureProcessingTest and SecureProcessing2Test fails when running with security.manager

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Minor
    • 3.6.1.Final, 4.0.0.Beta5
    • 4.0.0.Beta5
    • jaxrs
    • None
    • Hide

      jdk-10
      resteasy: 4.0.0-SNAPSHOT

      mvn verify -fn \
      -Dsecurity.manager \
      -Dserver.home=/home/rsearls/j1/wfly10/wildfly/dist/target/wildfly-13.0.0.Final \
      -Dmaven.test.redirectTestOutputToFile=false \
      -Dtest=org.jboss.resteasy.test.xxe.SecureProcessingTest

      Show
      jdk-10 resteasy: 4.0.0-SNAPSHOT mvn verify -fn \ -Dsecurity.manager \ -Dserver.home=/home/rsearls/j1/wfly10/wildfly/dist/target/wildfly-13.0.0.Final \ -Dmaven.test.redirectTestOutputToFile=false \ -Dtest=org.jboss.resteasy.test.xxe.SecureProcessingTest

    Description

      These 2 tests fail when running with the security.manager.

      Here is the list of SecureProcessingTest tests.

            PASS: testSecurityFalseDTDsFalseExpansionFalse 
            PASS: testSecurityFalseDTDsFalseExpansionTrue
            FAILS: testSecurityFalseDTDsTrueExpansionDefault
            FAILS: testSecurityFalseDTDsTrueExpansionFalse
            FAILS: testSecurityFalseDTDsTrueExpansionTrue
            FAILS: testSecurityTrueDTDsDefaultExpansionDefault
            FAILS: testSecurityTrueDTDsDefaultExpansionFalse
            FAILS: testSecurityTrueDTDsDefaultExpansionTrue
            PASS: testSecurityTrueDTDsFalseExpansionDefault
            PASS: testSecurityTrueDTDsFalseExpansionFalse
            PASS: testSecurityTrueDTDsFalseExpansionTrue
            FAILS: testSecurityTrueDTDsTrueExpansionDefault
            FAILS: testSecurityTrueDTDsTrueExpansionFalse
            FAILS: testSecurityTrueDTDsTrueExpansionTrue 
            FAILS: testSecurityTrueDTDsTrueExpansionTrueWithApacheLinkMessage
      

      This is the error for SecureProcessingTest.

      [java.security.PrivilegedActionException: javax.xml.bind.UnmarshalException
       - with linked exception:
      [org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 10; DOCTYPE is 
          disallowed when the feature "http://apache.org/xml/
          features/disallow-doctype-decl" set to true.]]
      

      Attachments

        Activity

          People

            rsearls r searls
            rsearls r searls
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: