On Fri, 22 Nov 2024 23:17:17 GMT, Joe Wang <jo...@openjdk.org> wrote:
> Adjust JAXP Limits. Limits are adjusted as specified in the CSR. > > Tests: > Updated the config test with the new settings. > > Removed obsolete tests Bug6309988.java and > Bug4674384_MAX_OCCURS_Test.java, and files used by these tests. These tests > verified legacy properties. They came into the JDK from the JAXP and SJSXP > standalone libraries. Improvements were made before the integration into the > JDK via for example, SJSXP Issue 30. Though the issue tracker is no longer > accessible, the tests, e.g. IssueTracker30, are in the JAXP test suite. src/java.xml/share/classes/jdk/xml/internal/XMLSecurityManager.java line 101: > 99: */ > 100: @SuppressWarnings("deprecation") > 101: public static enum Limit { Is it necessary to have both a default and secure value anymore? All the values are the same for both AFACT. src/java.xml/share/conf/jaxp.properties line 184: > 182: jdk.xml.maxOccurLimit=5000 > 183: # > 184: # Limits the maximum element depth. The default value is 0. s/0/100/ ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/22337#discussion_r1858838309 PR Review Comment: https://git.openjdk.org/jdk/pull/22337#discussion_r1858839708