英文:
Does any information exist when Illegal access will be prohibited in Java, or in which version?
问题
我需要为我的项目记录一些内容。
我们目前使用 "DocXStamper" 在 Java 中填充 Word 文档。但是我们目前不被允许迁移到一个 "更安全" 的版本（比如 apache POI），而且目前也没有迁移到比 Java 11 更高的版本的计划。
但以防万一，我想要进行文档记录。因为 DocXStamper 依赖于 "org.javassist" 依赖项，该依赖项自 2010 年以来就没有维护了。
目前只有类似以下的警告：
警告：javassist.util.proxy.SecurityActions（文件：路径至/org.javassist/javassist/3.21.0-GA/598244f595db5c5fb713731eddbb1c91a58d959b/javassist-3.21.0-GA.jar）通过反射非法访问方法 java.lang.ClassLoader.defineClass（java.lang.String，byte[]，int，int，java.security.ProtectionDomain）
警告：请考虑向 javassist.util.proxy.SecurityActions 的维护人员报告此问题
警告：使用 --illegal-access=warn 启用进一步非法反射访问操作的警告
警告：所有非法访问操作在将来的版本中都将被拒绝
但为了最小化和承认可能的技术债务和风险，我想使用 "正确的信息" 对遗留代码进行文档记录。
我无法找到有关该主题的任何信息，除了 "摆脱这个依赖项"，而我目前不被允许这样做。
如果您能为我提供关于这个主题的更多深入信息，我将非常感谢。
英文:
I need to document some stuff for my Project.
We currently use "DocXStamper" to fill Word Documents with Java. But we are not allowed to migrate to a "safer" version (like apache POI) right now, and there are no Plans to migrate to a higher Java Version than 11 (for now).
But just in case I want to document it. Since DocXStamper relies on the "org.javassist" Dependency, which is not maintained since 2010.
Right now there are just Warnings like:
WARNING: Illegal reflective access by javassist.util.proxy.SecurityActions (file:path-to/org.javassist/javassist/3.21.0-GA/598244f595db5c5fb713731eddbb1c91a58d959b/javassist-3.21.0-GA.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain)
WARNING: Please consider reporting this to the maintainers of javassist.util.proxy.SecurityActions
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
But to minimize and acknowledge possible technical dept and risk, I want to document the legacy code with the "proper information".
I can not find any information to that topic, other than "just get rid of the dependency", which I am currently not allowed to do.
If you have and could give me further insight on that topic I would really appreciate it.
专注分享java语言的经验与见解，让所有开发者获益！
评论