src/share/jaxws_classes/com/sun/xml/internal/ws/util/pipe/AbstractSchemaValidationTube.java

*** 1,7 ****
  /*
!  * Copyright (c) 1997, 2012, Oracle and/or its affiliates. All rights reserved.
   * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   *
   * This code is free software; you can redistribute it and/or modify it
   * under the terms of the GNU General Public License version 2 only, as
   * published by the Free Software Foundation.  Oracle designates this
--- 1,7 ----
  /*
!  * Copyright (c) 1997, 2013, Oracle and/or its affiliates. All rights reserved.
   * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   *
   * This code is free software; you can redistribute it and/or modify it
   * under the terms of the GNU General Public License version 2 only, as
   * published by the Free Software Foundation.  Oracle designates this
*** 70,79 ****
--- 70,81 ----
  import java.net.URL;
  import java.util.*;
  import java.util.logging.Level;
  import java.util.logging.Logger;
  
+ import static com.sun.xml.internal.ws.util.xml.XmlUtil.allowFileAccess;
+ 
  /**
   * {@link Tube} that does the schema validation.
   *
   * @author Jitendra Kotamraju
   */
*** 88,98 ****
  
      public AbstractSchemaValidationTube(WSBinding binding, Tube next) {
          super(next);
          this.binding = binding;
          feature = binding.getFeature(SchemaValidationFeature.class);
!         sf = SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);
      }
  
      protected AbstractSchemaValidationTube(AbstractSchemaValidationTube that, TubeCloner cloner) {
          super(that, cloner);
          this.binding = that.binding;
--- 90,100 ----
  
      public AbstractSchemaValidationTube(WSBinding binding, Tube next) {
          super(next);
          this.binding = binding;
          feature = binding.getFeature(SchemaValidationFeature.class);
!         sf = allowFileAccess(SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI), false);
      }
  
      protected AbstractSchemaValidationTube(AbstractSchemaValidationTube that, TubeCloner cloner) {
          super(that, cloner);
          this.binding = that.binding;