-
Notifications
You must be signed in to change notification settings - Fork 79
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove unused DOMParserWrapper and strip down PDEXMLHelper #665
Conversation
I am not familiar with the code. Only did technical change. |
d734f26
to
7e04905
Compare
Does anybody know why there was a Nevertheless it should be checked if the differences are relevant. Does anybody know this already? |
46555e5
to
f7a26e6
Compare
f7a26e6
to
2044151
Compare
@SuppressWarnings("restriction") | ||
SAXParser parser = org.eclipse.core.internal.runtime.XmlProcessorFactory | ||
.createSAXParserWithErrorOnDOCTYPE(); | ||
parser.parse(stream, handler); |
Check failure
Code scanning / CodeQL
Resolving XML external entity in user-controlled data Critical
user-provided value
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
interesting: CodeQL added a false positive marker here
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, I assume it does not understand the method that creates the factory.
ui/org.eclipse.pde.core/src/org/eclipse/pde/internal/core/util/SchemaUtil.java
Dismissed
Show dismissed
Hide dismissed
- Inline SAXParserWrapper - Remove unused code from PDEXMLHelper - Use XMLProcessorFactory from eclipse.platform in favor of a own one
2044151
to
f56c9d7
Compare
f56c9d7
to
b568b0d
Compare
@@ -84,10 +83,11 @@ public class XmlReferenceDescriptorWriter { | |||
* to write the reports to | |||
* @param debug if debugging infos should be written out to the console | |||
*/ | |||
@SuppressWarnings("restriction") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
using a local variable could move the suppress to the actual line of code.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Unfortunately the parser field is also used below and since this method is relatively small in scope I skipped the extra variable in this case for simpler code.
looks like a lot of work. thanks. |
@jukzi you just worked in the area of XML processing recently, do you know any use-case of the to be removed classes?