HXSecurity / DongTai-agent-java

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.
https://dongtai.io
Apache License 2.0
682 stars 192 forks source link

[BUG]: JDK17 exist Reflect Problem #613

Open RTxin opened 11 months ago

RTxin commented 11 months ago

Preflight Checklist

Version

1.14.0

Installation Type

Official SaaS Service

Describe the details of the bug and the steps to reproduce it

java.lang.IllegalAccessException: class io.dongtai.iast.core.handler.hookpoint.vulscan.dynamic.xxe.XMLInputFactoryCheck cannot access class com.sun.xml.internal.stream.XMLInputFactoryImpl (in module java.xml) because module java.xml does not export com.sun.xml.internal.stream to unnamed module @22d6f11

Additional Information

No response

Logs

java.lang.IllegalAccessException: class io.dongtai.iast.core.handler.hookpoint.vulscan.dynamic.xxe.XMLInputFactoryCheck cannot access class com.sun.xml.internal.stream.XMLInputFactoryImpl (in module java.xml) because module java.xml does not export com.sun.xml.internal.stream to unnamed module @22d6f11
allen07sec commented 10 months ago

Please add the following parameters during startup and observe if this type of problem still exists

    --add-opens="java.xml/com.sun.xml.internal.stream=ALL-UNNAMED" \
    --add-opens="java.xml/com.sun.org.apache.xerces.internal.utils=ALL-UNNAMED" \
    --add-opens="java.xml/com.sun.org.apache.xerces.internal.impl=ALL-UNNAMED" \