1.1 --- a/src/share/jaxws_classes/com/sun/tools/internal/xjc/SchemaCache.java Thu Aug 08 10:10:38 2013 -0700 1.2 +++ b/src/share/jaxws_classes/com/sun/tools/internal/xjc/SchemaCache.java Fri Aug 23 09:57:21 2013 +0100 1.3 @@ -1,5 +1,5 @@ 1.4 /* 1.5 - * Copyright (c) 1997, 2012, Oracle and/or its affiliates. All rights reserved. 1.6 + * Copyright (c) 1997, 2013, Oracle and/or its affiliates. All rights reserved. 1.7 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 1.8 * 1.9 * This code is free software; you can redistribute it and/or modify it 1.10 @@ -35,6 +35,8 @@ 1.11 import javax.xml.XMLConstants; 1.12 import org.xml.sax.SAXException; 1.13 1.14 +import static com.sun.xml.internal.bind.v2.util.XmlFactory.allowFileAccess; 1.15 + 1.16 /** 1.17 * Wraps a JAXP {@link Schema} object and lazily instantiate it. 1.18 * 1.19 @@ -59,7 +61,7 @@ 1.20 try { 1.21 // do not disable secure processing - these are well-known schemas 1.22 SchemaFactory sf = XmlFactory.createSchemaFactory(XMLConstants.W3C_XML_SCHEMA_NS_URI, false); 1.23 - schema = sf.newSchema(source); 1.24 + schema = allowFileAccess(sf, false).newSchema(source); 1.25 } catch (SAXException e) { 1.26 // we make sure that the schema is correct before we ship. 1.27 throw new AssertionError(e);