Do not use com.sun.org.apache JAXP package names in string literals

This rule detects string literals that start with one of the following JAXP 1.3 package names.

The preferred replacements are in the standard Java SE API in the javax.xml.* package.

For example,
XMLReader parser = XMLReaderFactory.createXMLReader("com.sun.org.apache.xerces.internal.parsers.XMLParser");

should be replaced with:

XMLReader parser = XMLReaderFactory.createXMLReader();

If you want to continue to use the older JAXP implementation and internal classes, you can download the jar files you need and include them in your application. Java 6 and Java 7 include the JAXP 1.4 implementation using the javax.xml and org.apache packages.

Note that the IBM Java 7 has added some of these internal APIs back to to the JRE to ease migration issues. It is still considered best practices to change your code to not use these internal APIs.