chemistry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Florian Müller (JIRA) <j...@apache.org>
Subject [jira] [Commented] (CMIS-1075) Allow exclusion of Woodstox dependency
Date Wed, 15 May 2019 15:21:00 GMT

    [ https://issues.apache.org/jira/browse/CMIS-1075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840500#comment-16840500
] 

Florian Müller commented on CMIS-1075:
--------------------------------------

I've downloaded the latest (trunk) CMIS Workbench from Apache build server, deleted the Woodstox
jar, ran it with OpenJDK 13 and connected to an AtomPub repository. It still works. There
is a warning message in the logs that Woodstox is not available, but that's it. It falls back
to the built-in XML parser.

Apart from that, I would not recommend connecting to an AtomPub repository without Woodstox.
Other StAX parsers we have tested have security or concurrency issues or functional shortcomings.

> Allow exclusion of Woodstox dependency
> --------------------------------------
>
>                 Key: CMIS-1075
>                 URL: https://issues.apache.org/jira/browse/CMIS-1075
>             Project: Chemistry
>          Issue Type: Bug
>          Components: opencmis-commons
>    Affects Versions: OpenCMIS 1.1.0
>            Reporter: Manfred Huber
>            Priority: Critical
>              Labels: build, easyfix, patch, usability
>         Attachments: opencmis_xmlutils.patch
>
>   Original Estimate: 3h
>  Remaining Estimate: 3h
>
> We need to exlcude the Woodstox dependency from opencmis in our project, which is currently
not possible.
> If you exclude Woodstox you'll get an {{NoClassDefFoundError}} at runtime.
> The reason is that the class {{XMLUtils}} imports Woodstox classes. The attached patch
resolves this logic in a static inner class.
> Please note that we created this patch based on the {{chemistry-opencmis-1.1.0}} tag.
> I pushed this change to my fork of opencmis on [Github|https://github.com/downdrown/chemistry-opencmis/commit/ff047559e077cf4d57566a0f43e5f08d29d46b07]
but was not able to create a PR since there's no maintenance branch for 1.1.0.
> Edit: the above link to Github is wrong, the correct one is [this|https://github.com/downdrown/chemistry-opencmis/commit/26c3be7583ca6ad74ac30ac06c3b0ea02c588bfb]



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message