tracker issue : CF-4206929

select a category, or use search below
(searches all categories and all time range)
Title:

odd behavior with xmlParse and CF 2016 when in sandbox mode

| View in Tracker

Status/Resolution/Reason: To Track//PRNeedInfo

Reporter/Name(from Bugbase): Justin H. / ()

Created: 02/03/2020

Components: Security, Sandbox

Versions: 2016

Failure Type: Usability Issue

Found In Build/Fixed In Build: CF 2016 update 13 /

Priority/Frequency: Normal / Very few users will encounter

Locale/System: English / Win 2016

Vote Count: 1

Problem Description: We recently upgraded from CF 11 to CF 2016. Occasionally we are getting this error access denied ("java.io.FilePermission"... when trying to parse an in memory xml string. We have our application sandboxed, so we don't get this error when sandboxing is turned off but we do get when sandboxing is turned on.

Steps to Reproduce: Sandbox a CF application so it is not allowed to write to applications directory. Call an REST/SOAP service that returns a XML string. Call xmlParse on the response.

Actual Result: See Post https://community.adobe.com/t5/coldfusion/odd-behavior-with-xmlparse-and-cf-2016/m-p/10899830?page=1#M184450

Expected Result: Converts XML text into an XML document object

Any Workarounds: We are using FW1 so the model is getting cached. If I restart ColdFusion that seems to fix the problem, however the other day it did not fix the problem in production and I have since had to turn off Sandboxing altogether since it's an all or nothing swithc.

Attachments:

Comments:

Hi,   Can you share the exception logs when you see this error?   Thanks, Kailash
Comment by Kailash B.
33122 | February 14, 2020 05:38:54 AM GMT