| Category: | Bug report |
Priority: | High |
Status: | New |
| Project: | Severity: | Minor |
Resolution: | Open |
|
| Component: | Reproducibility: | Always |
Assigned to: |
When loading, jasperreports 6.18.1 emits several types of messages which should be suppressed as follows;
======================
INFO: Loading XML bean definitions from URL [jar:file:/main/srhaque/jasperstarter/lib/jasperreports-chart-themes-6.18.1.jar!/net/sf/jasperreports/chartthemes/spring/beans/chartThemesBeans.xml]
Jan 13, 2022 7:41:37 PM org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
INFO: Loading XML bean definitions from URL [jar:file:/main/srhaque/jasperstarter/lib/jasperreports-chart-themes-6.18.1.jar!/net/sf/jasperreports/chartthemes/spring/beans/chartConstantsBean.xml]
.
.
.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by net.sf.jasperreports.engine.util.ClassUtils (file:/main/srhaque/jasperstarter/lib/jasperreports-6.18.1.jar) to constructor com.sun.org.apache.xerces.internal.util.XMLGrammarPoolImpl()
WARNING: Please consider reporting this to the maintainers of net.sf.jasperreports.engine.util.ClassUtils
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
======================
Both of these leak information about the filesystem layout. Depending on the logging arrangements, these could presumably escape the host system, and so
this could be considered a security exposure. I've set the priority of this to "high" because of this potential exposure.
