Tatu Saloranta

Wow. Please tell us how you really feel @michael-o :-) I don't think comparison here is particularly apt: Java 8 has been around for a while and has really become...

Quick note: I think this upgrade (which I am in favor of) should bump Woodstox major version to 7.

@veita yes, true enough. Security aspects may be one area where it is one of lesser evils. I guess the fundamental root cause realistically is that Stax spec did not...

Note to self: `ACCESS_` properties have been added in `XMLConstants` in Java 7. Given that Woodstox requires only Java 6, this could be problematic if we rely on constants. Except...

Also: to make sure, JEP part relevant reads: ``` JAXP 1.5 adds three new API-level properties to limit external connections to specific, named protocols: javax.xml.XMLConstants.ACCESS_EXTERNAL_DTD: A list of protocols by...

@Chandan83 I don't remember if this is a requirement for the underlying validator (MSV) or the interface Woodstox specifies for validators, but ultimately I think many if not all validators...

@Chandan83 it has been quite a while since I worked on validation part, but my first reaction is that instead of using multiple validators and trying to make them co-operate,...

@Chandan83 sounds good. I think it actually does make sense to first try implement feature, then clean up API via stax2.

@Chandan83 That sounds possibly useful, if you still have it. So PR would be welcome.

Hmmh. That is certainly unexpected... and does not appear to be tested or used. I will need to investigate what is the background story here. Thank you for reporting this.