[jboss-jira] [JBoss JIRA] (JBEE-135) JAXWS SPI Provider should use ServiceLoader within a privileged block

Alessio Soldano created JBEE-135: ------------------------------------ Summary: JAXWS SPI Provider should use ServiceLoader within a privileged block Key: JBEE-135 URL: https://issues.jboss.org/browse/JBEE-135 Project: JBoss JavaEE Spec APIs Issue Type: Bug Components: jboss-jaxws-api Reporter: Alessio Soldano Assignee: Alessio Soldano The JAXWS SPI Provider uses ServiceLoader to look for user specified provider implementations. The search is performed using the current TCCL. When iterating on the ServiceLoader results, read permission on the relevant jar is required. It looks correct to run in a privileged block there, also considering that the user would need a permission for setting/changing the TCCL. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira