SOAP Envelope 'entityExpansion' Problem

Question

Hi all.
Has anyone got saaj to work from a linux applet communicating with a Servlet ??
Im using JWSDP1.1 (yes i know its out of date, and at the moment i really dont fancy switching unless its absolutely needed) and tomcat 4.1.24.
Ive written a simple Servlet which just extracts the root element in the posted SOAPMessage, and then returns the message back to the user.
SOAPTestServlet.java
import javax.xml.soap.*;
import javax.xml.messaging.*;
import javax.servlet.*;
import java.util.Date;
import java.util.*;
public class SOAPTestServlet extends JAXMServlet implements ReqRespListener {
        private ServletContext servletContext;
        public void init(ServletConfig servletConfig) throws ServletException {
                super.init(servletConfig);
                System.out.println("Servlet init");
                servletContext = servletConfig.getServletContext();
        public SOAPMessage onMessage(SOAPMessage inMsg) {
                System.out.println("Msg received @ " + (new Date()).toString());
                try {
                        inMsg.writeTo(System.out);
                        SOAPElement mPElement = getMPElement(inMsg);
                } catch (Exception e) {
                        e.printStackTrace();
                System.out.println();
                return inMsg;
        private SOAPElement getMPElement(SOAPMessage m) throws SOAPException {
          // create search element
          SOAPPart sp = m.getSOAPPart();
          SOAPEnvelope se = sp.getEnvelope();
          Name mPElementName = se.createName("MessageProtocol");
                System.out.println("Got envelope");
          Iterator itr = m.getSOAPPart().getEnvelope().getBody().getChildElements(mPElementName);
          while (itr.hasNext()) {
               // assuming there can only one MessageProtocol Element, return first
               return (SOAPBodyElement) itr.next();
          // if none found return null;
          return null;
}a simple application sender creates a message and sends it to the servlet. Then receives the reply, prints to command line, and extracts the root element. This code works fine and behaves as normal.
SOAPSender.java
import javax.xml.soap.*;
import java.util.*;
import javax.swing.*;
import java.net.URL;
import java.awt.*;
public class SOAPSender {
        private SOAPMessage outMsg, inMsg;
        private MessageFactory msgFactory;
        private SOAPConnectionFactory connFactory;
        private SOAPConnection conn;
        private String servletName;
        private URL hostURL;
        public SOAPSender() {}
        public static void main(String args[]) {
                SOAPSender ss = new SOAPSender();
                ss.init();
                ss.start();
        public void init() {
                System.out.println("Initialising Sender" + (new Date()).toString());
                try {
                        msgFactory = MessageFactory.newInstance();
                        connFactory = SOAPConnectionFactory.newInstance();
                        servletName = "http://localhost/stServlet/servlet/SOAPTestServlet";
                        System.out.println("URI: " + servletName);
                        hostURL = new URL(servletName);
                        outMsg = createMessage();
                } catch (Exception e) {
                        System.out.println("Init Exception: " + e.getMessage());
                        e.printStackTrace();
                System.out.println("Sender Initialised" + (new Date()).toString());
        public void start() {
                System.out.println("Sender started @ " + (new Date()).toString());
                        try {
                                System.out.println("Starting send routine    @ " + (new Date()).toString());
                                conn = connFactory.createConnection();
                                System.out.println("\tConnection created   @ " + (new Date()).toString());
                                System.out.println("\tSending message      @ " + (new Date()).toString());
                                inMsg = conn.call(outMsg, hostURL);
                                System.out.println("\tReply received   @ " + (new Date()).toString());
                                System.out.println("\tConnection closing   @ " + (new Date()).toString());
                                conn.close();
                                System.out.println("\tConnection closed    @ " + (new Date()).toString());
                                if (inMsg == null) throw new Exception ("Msg received == null");
                                //System.out.println("\n\tCheck console for msg");
                                inMsg.writeTo(System.out);
                                System.out.println();
                                System.out.println("\tExtracting data      @ " + (new Date()).toString());
                                extractData(inMsg);
                                System.out.println("\tExtracting done      @ " + (new Date()).toString());
                        } catch (Exception e) {
                                try {
                                        System.out.println("\tConnection closing (forced) @ " + (new Date()).toString());
                                        conn.close();
                                        System.out.println("\tConnection closed (forced) @ " + (new Date()).toString());
                                } catch (Exception ex) {
                                        System.out.println("\tConnection close exception " + ex.toString());
                                System.out.println("\tException @ " + (new Date()).toString());
                                System.out.println("\tException :" + e.toString());
                                e.printStackTrace();
        private SOAPMessage createMessage() throws SOAPException {
                // create SOAP message from connection
                SOAPMessage message = msgFactory.createMessage();
                // Populate soap message
                SOAPPart soapPart = message.getSOAPPart();
                SOAPEnvelope soapEnvelope = soapPart.getEnvelope();
                SOAPHeader soapHeader = soapEnvelope.getHeader();
                SOAPBody soapBody = soapEnvelope.getBody();
                soapHeader.detachNode();
                // populate body of MSG
                Name msgPElement = soapEnvelope.createName("MessageProtocol");
                SOAPBodyElement soapBodyElement = soapBody.addBodyElement(msgPElement);
                return message;
        private void extractData(SOAPMessage message) throws SOAPException {
                SOAPElement mPElement = getMPElement(message);
        private SOAPElement getMPElement(SOAPMessage m) throws SOAPException {
          // create search element
          SOAPPart sp = m.getSOAPPart();
          SOAPEnvelope se = sp.getEnvelope();
          Name mPElementName = se.createName("MessageProtocol");
          // locate MessageProtocol Element
          Iterator itr = m.getSOAPPart().getEnvelope().getBody().getChildElements(mPElementName);
          while (itr.hasNext()) {
               // assuming there can only one MessageProtocol Element, return first
               return (SOAPBodyElement) itr.next();
          // if none found return null;
          return null;
}output:
Initialising Sender Mon Oct 27 12:58:19 GMT 2003
URI: http://localhost/stServlet/servlet/SOAPTestServlet
Sender Initialised Mon Oct 27 12:58:20 GMT 2003
Sender started @ Mon Oct 27 12:58:20 GMT 2003
Starting send routine    @ Mon Oct 27 12:58:20 GMT 2003
        Connection created   @ Mon Oct 27 12:58:20 GMT 2003
        Sending message      @ Mon Oct 27 12:58:20 GMT 2003
        Reply received   @ Mon Oct 27 12:58:20 GMT 2003
        Connection closing   @ Mon Oct 27 12:58:20 GMT 2003
        Connection closed    @ Mon Oct 27 12:58:20 GMT 2003
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/"><soap-env:Body><MessageProtocol></MessageProtocol></soap-env:Body></soap-env:Envelope>
        Extracting data      @ Mon Oct 27 12:58:20 GMT 2003
        Extracting done      @ Mon Oct 27 12:58:20 GMT 2003The same code in applet form however throws an Entity expansion exception when i try the line sp.getEnvelope(); in getMPElement() method:
Initialising AppletMon Oct 27 12:47:02 GMT 2003
URI: http://localhost/stServlet/servlet/SOAPTestServlet
Got Envelope
Applet InitialisedMon Oct 27 12:47:02 GMT 2003
Applet started @ Mon Oct 27 12:47:03 GMT 2003
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/"><soap-env:Body><MessageProtocol></MessageProtocol></soap-env:Body></soap-env:Envelope>
javax.xml.soap.SOAPException: Unable to create envelope from given source: access denied (java.util.PropertyPermission entityExpansionLimit read) Nested exception: access denied (java.util.PropertyPermission entityExpansionLimit read)
     at com.sun.xml.messaging.saaj.soap.dom4j.EnvelopeFactoryImpl.createEnvelope(EnvelopeFactoryImpl.java:73)
     at com.sun.xml.messaging.saaj.soap.SOAPPartImpl.getEnvelope(SOAPPartImpl.java:87)
     at SOAPSenderApplet.getMPElement(SOAPSenderApplet.java:136)
     at SOAPSenderApplet.extractData(SOAPSenderApplet.java:130)
     at SOAPSenderApplet.start(SOAPSenderApplet.java:89)
     at sun.applet.AppletPanel.run(AppletPanel.java:371)
     at java.lang.Thread.run(Thread.java:536)Windows does not throw this exception. Ive looked on the web, and found that this exception is thrown to prevent 'deeply' nested entity definitions from consuming the CPU and opening a denial of service attack. Not sure that my message contains 'deeply' nested definiations, in fact it contains none at all !!.
I can call the getMPElement method on the out going message successfully, but not on the reply message. Both SOAP Messages look identical on dumping to the output stream System.out
Now im as sure as it gets that both the application, and applet are using the same SOAP library files. So why on earth does the applet have a cry, where the application doesnt ??
Your help would be muchly appreciated. (the Dukes available are all i have left.)

Answer 1

Once someone replies to your message, you cannot reduce dukes....only increase. Usually best to start where you want, and then possibly raise them to 'perk' interest.
If you have a message that no one has replied to, you just go to that posting while signed in. It will allow you to reduce dukes.
Cheers