Understand how StAX works in an OSGi environment and learn which bundles you need to deploy in order to use a StAX implementation other than the one provided by the JRE.| Andreas Veithen's blog
This article exposes another design flaw in WebSphere's default StAX implementation (XLXP 2).| Andreas Veithen's blog
This article exposes a design flaw in WebSphere's default StAX implementation (XLXP 2) that can be exploited to perform a denial-of-service attack.| Andreas Veithen's blog
To change the StAX implementation used in a Java EE application it should normally be enough to simply add the JAR with the third party StAX implementation (such as Woodstox) to the application. This works as expected on most application servers, except on WebSphere. In this blog post I will explain why this is so and what this tells us about the internals of WebSphere.| Andreas Veithen's blog