BZ1150634: switch off external-parameter-entity processing in XML parser

kiegroup · Jan 5, 2015 · 8a3862b · 8a3862b
1 parent 2d2074a
commit 8a3862b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/jbpm-simulation/src/main/java/org/jbpm/simulation/util/JBPMBpmn2ResourceImpl.java b/jbpm-simulation/src/main/java/org/jbpm/simulation/util/JBPMBpmn2ResourceImpl.java
@@ -19,6 +19,7 @@ public JBPMBpmn2ResourceImpl(URI uri) {
         // Switch off DTD external entity processing
         Map parserFeatures = new HashMap();
         parserFeatures.put("http://xml.org/sax/features/external-general-entities", false);
+        parserFeatures.put("http://xml.org/sax/features/external-parameter-entities", false);
         this.getDefaultLoadOptions().put(XMLResource.OPTION_PARSER_FEATURES, parserFeatures);
 
     }