archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-28 15:24:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8305972: Update XML Security for Java to 3.0.2

Browse source 
Reviewed-by: mullan
This commit is contained in:
Weijun Wang 2023-05-19 17:46:41 +00:00
parent 265f40b4f7
commit f0aebc8141
38 changed files with 1040 additions and 260 deletions
Download patch file Download diff file Expand all files Collapse all files

17
src/java.base/share/conf/security/java.security
View file

@ -1001,6 +1001,23 @@ jdk.xml.dsig.secureValidationPolicy=\
noDuplicateIds,\
noRetrievalMethodLoops
#
# Support for the here() function
#
# This security property determines whether the here() XPath function is
# supported in XML Signature generation and verification.
#
# If this property is set to false, the here() function is not supported.
# Generating an XML Signature that uses the here() function will throw an
# XMLSignatureException. Validating an existing XML Signature that uses the
# here() function will also throw an XMLSignatureException.
#
# The default value for this property is true.
#
# Note: This property is currently used by the JDK Reference implementation.
# It is not guaranteed to be examined and used by other implementations.
#
#jdk.xml.dsig.hereFunctionSupported=true
#
# Deserialization JVM-wide filter factory

2
src/java.base/share/lib/security/default.policy
View file

@ -96,6 +96,8 @@ grant codeBase "jrt:/java.xml.crypto" {
"removeProviderProperty.XMLDSig";
permission java.security.SecurityPermission
"com.sun.org.apache.xml.internal.security.register";
permission java.security.SecurityPermission
"getProperty.jdk.xml.dsig.hereFunctionSupported";
permission java.security.SecurityPermission
"getProperty.jdk.xml.dsig.secureValidationPolicy";
permission java.lang.RuntimePermission