ndw’s avatarndw’s Twitter Archive—№ 33,351

  1. Is it reasonable to search the classpath for configuration files? On the one hand, loading /org/xmlresolver/catalog.xml from all the locations on the classpath automatically would be convenient. On the other hand, I suppose someone could put a malicious catalog file in there.