--- a/jaxp/src/javax/xml/XMLConstants.java Mon May 06 18:50:16 2013 +0200
+++ b/jaxp/src/javax/xml/XMLConstants.java Wed May 08 23:38:03 2013 -0700
@@ -73,7 +73,7 @@
* <p>The official XML Namespace name URI.</p>
*
* <p>Defined by the XML specification to be
- * "<code>http://www.w3.org/XML/1998/namespace</code>".</p>
+ * "{@code http://www.w3.org/XML/1998/namespace}".</p>
*
* @see <a
* href="http://www.w3.org/TR/REC-xml-names/#ns-qualnames">
@@ -85,7 +85,7 @@
/**
* <p>The official XML Namespace prefix.</p>
*
- * <p>Defined by the XML specification to be "<code>xml</code>".</p>
+ * <p>Defined by the XML specification to be "{@code xml}".</p>
*
* @see <a
* href="http://www.w3.org/TR/REC-xml-names/#ns-qualnames">
@@ -99,7 +99,7 @@
* XMLConstants.XMLNS_ATTRIBUTE}, Namespace name URI.</p>
*
* <p>Defined by the XML specification to be
- * "<code>http://www.w3.org/2000/xmlns/</code>".</p>
+ * "{@code http://www.w3.org/2000/xmlns/}".</p>
*
* @see <a
* href="http://www.w3.org/TR/REC-xml-names/#ns-qualnames">
@@ -117,7 +117,7 @@
*
* <p>It is <strong><em>NOT</em></strong> valid to use as a
* prefix. Defined by the XML specification to be
- * "<code>xmlns</code>".</p>
+ * "{@code xmlns}".</p>
*
* @see <a
* href="http://www.w3.org/TR/REC-xml-names/#ns-qualnames">
@@ -128,7 +128,7 @@
/**
* <p>W3C XML Schema Namespace URI.</p>
*
- * <p>Defined to be "<code>http://www.w3.org/2001/XMLSchema</code>".
+ * <p>Defined to be "{@code http://www.w3.org/2001/XMLSchema}".
*
* @see <a href=
* "http://www.w3.org/TR/xmlschema-1/#Instance_Document_Constructions">
@@ -141,7 +141,7 @@
/**
* <p>W3C XML Schema Instance Namespace URI.</p>
*
- * <p>Defined to be "<code>http://www.w3.org/2001/XMLSchema-instance</code>".</p>
+ * <p>Defined to be "{@code http://www.w3.org/2001/XMLSchema-instance}".</p>
*
* @see <a href=
* "http://www.w3.org/TR/xmlschema-1/#Instance_Document_Constructions">
@@ -154,7 +154,7 @@
/**
* <p>W3C XPath Datatype Namespace URI.</p>
*
- * <p>Defined to be "<code>http://www.w3.org/2003/11/xpath-datatypes</code>".</p>
+ * <p>Defined to be "{@code http://www.w3.org/2003/11/xpath-datatypes}".</p>
*
* @see <a href="http://www.w3.org/TR/xpath-datamodel">XQuery 1.0 and XPath 2.0 Data Model</a>
*/
@@ -163,14 +163,14 @@
/**
* <p>XML Document Type Declaration Namespace URI as an arbitrary value.</p>
*
- * <p>Since not formally defined by any existing standard, arbitrarily define to be "<code>http://www.w3.org/TR/REC-xml</code>".
+ * <p>Since not formally defined by any existing standard, arbitrarily define to be "{@code http://www.w3.org/TR/REC-xml}".
*/
public static final String XML_DTD_NS_URI = "http://www.w3.org/TR/REC-xml";
/**
* <p>RELAX NG Namespace URI.</p>
*
- * <p>Defined to be "<code>http://relaxng.org/ns/structure/1.0</code>".</p>
+ * <p>Defined to be "{@code http://relaxng.org/ns/structure/1.0}".</p>
*
* @see <a href="http://relaxng.org/spec-20011203.html">RELAX NG Specification</a>
*/
@@ -181,14 +181,212 @@
*
* <ul>
* <li>
- * <code>true</code> instructs the implementation to process XML securely.
+ * {@code true} instructs the implementation to process XML securely.
* This may set limits on XML constructs to avoid conditions such as denial of service attacks.
* </li>
* <li>
- * <code>false</code> instructs the implementation to process XML acording the letter of the XML specifications
- * ingoring security issues such as limits on XML constructs to avoid conditions such as denial of service attacks.
+ * {@code false} instructs the implementation to process XML in accordance with the XML specifications
+ * ignoring security issues such as limits on XML constructs to avoid conditions such as denial of service attacks.
* </li>
* </ul>
*/
public static final String FEATURE_SECURE_PROCESSING = "http://javax.xml.XMLConstants/feature/secure-processing";
+
+
+ /**
+ * <p>Property: accessExternalDTD</p>
+ *
+ * <p>
+ * Restrict access to external DTDs and external Entity References to the protocols specified.
+ * If access is denied due to the restriction of this property, a runtime exception that
+ * is specific to the context is thrown. In the case of {@link javax.xml.parsers.SAXParser}
+ * for example, {@link org.xml.sax.SAXException} is thrown.
+ * </p>
+ *
+ * <p>
+ * <b>Value: </b> a list of protocols separated by comma. A protocol is the scheme portion of a
+ * {@link java.net.URI}, or in the case of the JAR protocol, "jar" plus the scheme portion
+ * separated by colon.
+ * A scheme is defined as:
+ *
+ * <blockquote>
+ * scheme = alpha *( alpha | digit | "+" | "-" | "." )<br>
+ * where alpha = a-z and A-Z.<br><br>
+ *
+ * And the JAR protocol:<br>
+ *
+ * jar[:scheme]<br><br>
+ *
+ * Protocols including the keyword "jar" are case-insensitive. Any whitespaces as defined by
+ * {@link java.lang.Character#isSpaceChar } in the value will be ignored.
+ * Examples of protocols are file, http, jar:file.
+ *
+ * </blockquote>
+ *</p>
+ *
+ *<p>
+ * <b>Default value:</b> The default value is implementation specific and therefore not specified.
+ * The following options are provided for consideration:
+ * <blockquote>
+ * <UL>
+ * <LI>an empty string to deny all access to external references;</LI>
+ * <LI>a specific protocol, such as file, to give permission to only the protocol;</LI>
+ * <LI>the keyword "all" to grant permission to all protocols.</LI>
+ *</UL><br>
+ * When FEATURE_SECURE_PROCESSING is enabled, it is recommended that implementations
+ * restrict external connections by default, though this may cause problems for applications
+ * that process XML/XSD/XSL with external references.
+ * </blockquote>
+ * </p>
+ *
+ * <p>
+ * <b>Granting all access:</b> the keyword "all" grants permission to all protocols.
+ * </p>
+ * <p>
+ * <b>System Property:</b> The value of this property can be set or overridden by
+ * system property {@code javax.xml.accessExternalDTD}.
+ * </p>
+ *
+ * <p>
+ * <b>${JAVA_HOME}/lib/jaxp.properties:</b> This configuration file is in standard
+ * {@link java.util.Properties} format. If the file exists and the system property is specified,
+ * its value will be used to override the default of the property.
+ * </p>
+ *
+ * <p>
+ *
+ * </p>
+ * @since 1.7
+ */
+ public static final String ACCESS_EXTERNAL_DTD = "http://javax.xml.XMLConstants/property/accessExternalDTD";
+
+ /**
+ * <p>Property: accessExternalSchema</p>
+ *
+ * <p>
+ * Restrict access to the protocols specified for external reference set by the
+ * schemaLocation attribute, Import and Include element. If access is denied
+ * due to the restriction of this property, a runtime exception that is specific
+ * to the context is thrown. In the case of {@link javax.xml.validation.SchemaFactory}
+ * for example, org.xml.sax.SAXException is thrown.
+ * </p>
+ * <p>
+ * <b>Value:</b> a list of protocols separated by comma. A protocol is the scheme portion of a
+ * {@link java.net.URI}, or in the case of the JAR protocol, "jar" plus the scheme portion
+ * separated by colon.
+ * A scheme is defined as:
+ *
+ * <blockquote>
+ * scheme = alpha *( alpha | digit | "+" | "-" | "." )<br>
+ * where alpha = a-z and A-Z.<br><br>
+ *
+ * And the JAR protocol:<br>
+ *
+ * jar[:scheme]<br><br>
+ *
+ * Protocols including the keyword "jar" are case-insensitive. Any whitespaces as defined by
+ * {@link java.lang.Character#isSpaceChar } in the value will be ignored.
+ * Examples of protocols are file, http, jar:file.
+ *
+ * </blockquote>
+ *</p>
+ *
+ *<p>
+ * <b>Default value:</b> The default value is implementation specific and therefore not specified.
+ * The following options are provided for consideration:
+ * <blockquote>
+ * <UL>
+ * <LI>an empty string to deny all access to external references;</LI>
+ * <LI>a specific protocol, such as file, to give permission to only the protocol;</LI>
+ * <LI>the keyword "all" to grant permission to all protocols.</LI>
+ *</UL><br>
+ * When FEATURE_SECURE_PROCESSING is enabled, it is recommended that implementations
+ * restrict external connections by default, though this may cause problems for applications
+ * that process XML/XSD/XSL with external references.
+ * </blockquote>
+ * </p>
+ * <p>
+ * <b>Granting all access:</b> the keyword "all" grants permission to all protocols.
+ * </p>
+ *
+ * <p>
+ * <b>System Property:</b> The value of this property can be set or overridden by
+ * system property {@code javax.xml.accessExternalSchema}
+ * </p>
+ *
+ * <p>
+ * <b>${JAVA_HOME}/lib/jaxp.properties:</b> This configuration file is in standard
+ * java.util.Properties format. If the file exists and the system property is specified,
+ * its value will be used to override the default of the property.
+ *
+ * @since 1.7
+ * </p>
+ */
+ public static final String ACCESS_EXTERNAL_SCHEMA = "http://javax.xml.XMLConstants/property/accessExternalSchema";
+
+ /**
+ * <p>Property: accessExternalStylesheet</p>
+ *
+ * <p>
+ * Restrict access to the protocols specified for external references set by the
+ * stylesheet processing instruction, Import and Include element, and document function.
+ * If access is denied due to the restriction of this property, a runtime exception
+ * that is specific to the context is thrown. In the case of constructing new
+ * {@link javax.xml.transform.Transformer} for example,
+ * {@link javax.xml.transform.TransformerConfigurationException}
+ * will be thrown by the {@link javax.xml.transform.TransformerFactory}.
+ * </p>
+ * <p>
+ * <b>Value:</b> a list of protocols separated by comma. A protocol is the scheme portion of a
+ * {@link java.net.URI}, or in the case of the JAR protocol, "jar" plus the scheme portion
+ * separated by colon.
+ * A scheme is defined as:
+ *
+ * <blockquote>
+ * scheme = alpha *( alpha | digit | "+" | "-" | "." )<br>
+ * where alpha = a-z and A-Z.<br><br>
+ *
+ * And the JAR protocol:<br>
+ *
+ * jar[:scheme]<br><br>
+ *
+ * Protocols including the keyword "jar" are case-insensitive. Any whitespaces as defined by
+ * {@link java.lang.Character#isSpaceChar } in the value will be ignored.
+ * Examples of protocols are file, http, jar:file.
+ *
+ * </blockquote>
+ *</p>
+ *
+ *<p>
+ * <b>Default value:</b> The default value is implementation specific and therefore not specified.
+ * The following options are provided for consideration:
+ * <blockquote>
+ * <UL>
+ * <LI>an empty string to deny all access to external references;</LI>
+ * <LI>a specific protocol, such as file, to give permission to only the protocol;</LI>
+ * <LI>the keyword "all" to grant permission to all protocols.</LI>
+ *</UL><br>
+ * When FEATURE_SECURE_PROCESSING is enabled, it is recommended that implementations
+ * restrict external connections by default, though this may cause problems for applications
+ * that process XML/XSD/XSL with external references.
+ * </blockquote>
+ * </p>
+ * <p>
+ * <b>Granting all access:</b> the keyword "all" grants permission to all protocols.
+ * </p>
+ *
+ * <p>
+ * <b>System Property:</b> The value of this property can be set or overridden by
+ * system property {@code javax.xml.accessExternalStylesheet}
+ * </p>
+ *
+ * <p>
+ * <b>${JAVA_HOME}/lib/jaxp.properties: </b> This configuration file is in standard
+ * java.util.Properties format. If the file exists and the system property is specified,
+ * its value will be used to override the default of the property.
+ *
+ * @since 1.7
+ */
+ public static final String ACCESS_EXTERNAL_STYLESHEET = "http://javax.xml.XMLConstants/property/accessExternalStylesheet";
+
}