使用XMLSchema在配置解析代码中进行XML验证：最佳实践？ （Java）

Question

I have to parse a XML configuration file. I decided to do the basic validation with XMLSchema to avoid massive amounts of boilerplate code for validation. Since the parsing class should work for itself i was wondering: "How can i validate the incoming XML file with XMLSchema without having the XMLSchema stored on disc where it can be modified by third parties?" I know i can load the XMLSchema from an arbitrary InputStream, but the Schema itself must be stored somewhere. (And putting the Schema in a huge String object sounds like a very very bad idea) Has someone already did this? What are the best solution for such cases?

Have a nice start of the week!

Answer 1

I would place it in your deployment alongside the appropriate classes. Load it using

ClassLoader.getResourceAsStream()

If you're really worried about someone modifying this schema, why not deploy in a .jar file and then sign the .jar file ? That way you can ensure nobody will tamper with it, and you don't have to rely on third-party infrastructures, storing it remotely etc.

Answer 2

将其放在公共网站上。

Answer 3

Could stick it in a DB. I know Oracle has some sort of support for XMLSchemas.

Karl