FYI [Fwd: [Bug 175] New: Security improvement in org.xmlpull.v1.XmlPullParser]

forwarded as it is relevant to XmlPull.

alek

-------- Original Message --------
Subject: 	[Bug 175] New: Security improvement in 
org.xmlpull.v1.XmlPullParser
Date: 	Thu, 29 Jan 2004 03:06:07 -0500 (EST)
From: 	[email protected]
To: 	[email protected]



http://www.extreme.indiana.edu/bugzilla/show_bug.cgi?id=175

           Summary: Security improvement in org.xmlpull.v1.XmlPullParser
           Product: xpp3-java
           Version: 1.1.3
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: impl-mxp1
        AssignedTo: [email protected]
        ReportedBy: [email protected]


org.xmlpull.v1.XmlPullParser interface contains a TYPE constant array.

I'd like to point that Java arrays cannot be made immutable and so TYPE array
can be modified either by innocent mistake or with harmful intention.

I'd suggest converting this array to a number of string constants or providing
an access method.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.


-- 
The best way to predict the future is to invent it - Alan Kay


 

Yahoo! Groups Links

To visit your group on the web, go to:
 http://groups.yahoo.com/group/xmlpull-dev/

To unsubscribe from this group, send an email to:
 [email protected]

Your use of Yahoo! Groups is subject to:
 http://docs.yahoo.com/info/terms/