1.1 --- a/src/share/jaxws_classes/com/sun/xml/internal/ws/util/xml/XmlUtil.java Mon Oct 27 12:57:38 2014 -0700 1.2 +++ b/src/share/jaxws_classes/com/sun/xml/internal/ws/util/xml/XmlUtil.java Fri Oct 24 15:02:28 2014 +0200 1.3 @@ -63,6 +63,8 @@ 1.4 import java.io.OutputStreamWriter; 1.5 import java.io.Writer; 1.6 import java.net.URL; 1.7 +import java.security.AccessController; 1.8 +import java.security.PrivilegedAction; 1.9 import java.util.ArrayList; 1.10 import java.util.Enumeration; 1.11 import java.util.Iterator; 1.12 @@ -84,12 +86,16 @@ 1.13 1.14 private static final Logger LOGGER = Logger.getLogger(XmlUtil.class.getName()); 1.15 1.16 - private static boolean XML_SECURITY_DISABLED; 1.17 + private static final String DISABLE_XML_SECURITY = "com.sun.xml.internal.ws.disableXmlSecurity"; 1.18 1.19 - static { 1.20 - String disableXmlSecurity = System.getProperty("com.sun.xml.internal.ws.disableXmlSecurity"); 1.21 - XML_SECURITY_DISABLED = disableXmlSecurity == null || !Boolean.valueOf(disableXmlSecurity); 1.22 - } 1.23 + private static boolean XML_SECURITY_DISABLED = AccessController.doPrivileged( 1.24 + new PrivilegedAction<Boolean>() { 1.25 + @Override 1.26 + public Boolean run() { 1.27 + return Boolean.getBoolean(DISABLE_XML_SECURITY); 1.28 + } 1.29 + } 1.30 + ); 1.31 1.32 public static String getPrefix(String s) { 1.33 int i = s.indexOf(':');