解决CXF webService 调用报错: “Cannot create a secure XMLInputFactory”

package com.safein.web.listener;

import java.util.Properties;

import javax.servlet.ServletContextEvent;
import javax.servlet.ServletContextListener;

import org.apache.log4j.Logger;

/**
 * 系统初始化
 * @author julong
 * @date 2016-7-21 下午05:27:47
 */
public class SealManageListener implements ServletContextListener {
	private static final Logger logger = Logger.getLogger(SealManageListener.class);
	@Override
	public void contextDestroyed(ServletContextEvent arg0) {
		// TODO Auto-generated method stub

	}

	@Override
	public void contextInitialized(ServletContextEvent arg0) {
		// TODO Auto-generated method stub
		logger.debug("系统初始化设置.....");
		Properties props = System.getProperties();
        props.setProperty("org.apache.cxf.stax.allowInsecureParser", "1");
        props.setProperty("UseSunHttpHandler", "true");
	}

}

<?xml version="1.0" encoding="UTF-8"?>
<weblogic-application xmlns="http://www.bea.com/ns/weblogic/90">
    <application-param>
        <param-name>webapp.encoding.default</param-name>
        <param-value>UTF-8</param-value>
    </application-param>
    <prefer-application-packages>
        <package-name>javax.jws.*</package-name>
    </prefer-application-packages>
</weblogic-application>

javax.jws.*

	This document provides app server-specific configuration information for running Apache CXF.    JBoss Application Server    SpringBoot    WebLogic        Put jars in endorsed folder        Pack war in an ear, deploy the ear with weblogic-application.xml    Websphere        For WebSphere Versions < 6.1.0.29            No Web Services Feature Pack for WebSphere installed                put jar in the endorsed folder                Add your own class loader            Web Services Feature Pack for WebSphere Installed        For WebSphere 6.1.0.29+, V7 and V8    Glassfish    OC4J        Disclaimer        Background            Configuration overview            Oracle OC4J class loading            Needed components            Preparing stax-api            Replace the Oracle XML parser with Xerces            Get rid of OC4J JAX-WS libraries            swapping Oracle wsdl.jar with wsdl4j.jar and jaxb.jar API with jaxb-api-2.0.jar            Deploying applications            Oracle FAQ                I'm getting java.lang.ClassCastException: org.apache.xerces.jaxp.DocumentBuilderFactoryImpl                I cannot get WSDL (getting HTTP 500 accesing my CXF service WSDL with http://myshot/myservice?wsdl)                I'm getting java.lang.NoSuchMethodException: oracle.j2ee.ws.wsdl.extensions.soap.SOAPBodyImpl.getElementType()                I cannot get it to work still    Integration with Application Server FAQ    ResourcesJBoss Application ServerJBoss Application Server (JBoss AS) comes with its own webservices stack (JBossWS) in order for providing full JavaEE support.Starting from JBoss AS 6 M4, the default webservices stack is internally based on Apache CXF; as a consequence users might experiment classloading issues with classes from both the CXF libraries and its dependencies if included in deployments and not properly isolated. Please refer to the relevant JBoss AS documentation for details on how to turn on classloading isolation on the application server version in use.In particular, when willing to run Apache CXF based applications on top of JBoss AS 7 series, users have basically two options:    use JBoss AS as if it was a servlet container with no WS functionalities: this basically implies disabling the webservices subsystem for the user deployment, hence preventing the AS webservices stack from processing the ws endpoint deployment and letting the CXF libs included in the archive deal with any WS invocations when CXFServlet is hit; the webservices subsystem is turned off by adding a jboss-deployment-structure.xml as follows to the ws endpoint deployment:    <jboss-deployment-structure xmlns="urn:jboss:deployment-structure:1.2">        <deployment>            <exclude-subsystems>                <subsystem name="webservices" />            </exclude-subsystems>        </deployment>    </jboss-deployment-structure>    this approach offers the fastest route to deploying CXF apps on JBoss AS; the drawback is that no special ws integration with JBoss AS internals is available    rely on JBossWS integration and the Apache CXF libraries included in the application server (documentation): this implies removing any Apache CXF libs from the ws deployment as well as any other dependencies which is already included in JBoss AS (including any Java EE API jar); if included, the optional web.xml descriptor is to be rewritten according to JBossWS convention (see documentation); the Spring support is optional in JBoss AS and Spring based endpoint declaration is not the default/preferred configuration approach for ws endpoints, hence users willing to declare endpoints using Spring needs to create a org.springframework.spring module and put their endpoint declarations in a jbossws-cxf.xml descriptor; if the user application makes use of any lib besides tha JavaEE api, proper module dependencies are to be declared either using the jboss-deployment-structure.xml descriptor or the archive MANIFEST.MF (few directions on ws modules available here)The second approach allows leveraging the full JavaEE 6 stack (including e.g. JSR-109) as well as specific ws integration with JBoss AS internals.SpringBootPlease see CXF SpringBoot documentation.JAX-WS: see JAX-WS Spring Boot demo.JAX-RS:  see JAX-RS Spring Boot and JAX-RS Spring Boot Scan demos.WebLogicThere are two ways to deploy a CXF WAR archive in WebLogic. (Note: This has been validated on WebLogic9.2.)Put jars in endorsed folder    Put the geronimo-ws-metadata_2.0_spec-1.1.1.jar in the $Weblogic_Home/jdk_../jre/lib/endorsed folder.    Deploy the CXF war in weblogic.    (This way is not recommended, since it might break the application server itself. The method below is preferred, as it impacts a single module only.)Pack war in an ear, deploy the ear with weblogic-application.xml    Create a standard J2EE application.xml file in the META-INF folder. (Take $CXF_HOME/samples/java_first_spring_support for example)    <?xml version="1.0" encoding="UTF-8"?>    <!DOCTYPE application PUBLIC            "-//Sun Microsystems, Inc.//DTD J2EE Application 1.3//EN"            "http://java.sun.com/dtd/application_1_3.dtd">    <application>        <display-name>spring_http</display-name>        <module>            <web>                <web-uri>spring_http.war</web-uri>                <context-root>spring</context-root>            </web>        </module>    </application>    Create a weblogic-application.xml (Weblogic specific) in the META-INF folder.    <?xml version="1.0" encoding="UTF-8"?>    <weblogic-application xmlns="http://www.bea.com/ns/weblogic/90">        <application-param>            <param-name>webapp.encoding.default</param-name>            <param-value>UTF-8</param-value>        </application-param>        <prefer-application-packages>            <package-name>javax.jws.*</package-name>        </prefer-application-packages>    </weblogic-application>The prefer-application-packages element you see above sets up WebLogic's Filtering Classloader. Each class whose package matches one of the package-name elements listed will be searched for first within the EAR before relying on the WebLogic system classloader's version. If a package for a particular class is not listed here, WebLogic will try to load its own (possibly older) version first, so if you are getting deployment errors due to any particular class you might wish to add its package here.Also note you can, and may need to, specify other options in the weblogic-application.xml file such as XML processing factories as shown here. See the WebLogic guide for more information.    Run "jar cvf ..." command to create the ear and then deploy it. Alternatively, this blog entry provides a Mavenized method of building the EAR.