OPENNLP-1305: Disable DTD loading. (#376)

apache · Jun 2, 2020 · e4b331d · e4b331d
1 parent bc13b3d
commit e4b331d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/opennlp-tools/src/main/java/opennlp/tools/formats/letsmt/LetsmtDocument.java b/opennlp-tools/src/main/java/opennlp/tools/formats/letsmt/LetsmtDocument.java
@@ -124,6 +124,7 @@ static LetsmtDocument parse(InputStream letsmtXmlIn) throws IOException {
       XMLReader xmlReader = saxParser.getXMLReader();
       LetsmtDocumentHandler docHandler = new LetsmtDocumentHandler();
       xmlReader.setContentHandler(docHandler);
+      xmlReader.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
       xmlReader.parse(new InputSource(letsmtXmlIn));
       return new LetsmtDocument(docHandler.sentences);
     } catch (SAXException e) {