Skip to content
This repository was archived by the owner on Sep 13, 2022. It is now read-only.

Commit be3968d

Browse files
author
Jeremy Lindop
committed
BZ1150634: switch off external-parameter-entity processing in XML parser
1 parent 5641588 commit be3968d

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Diff for: jbpm-designer-backend/src/main/java/org/jbpm/designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java

+1
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ public JBPMBpmn2ResourceImpl(URI uri) {
3131
// Switch off DTD external entity processing
3232
Map parserFeatures = new HashMap();
3333
parserFeatures.put("http://xml.org/sax/features/external-general-entities", false);
34+
parserFeatures.put("http://xml.org/sax/features/external-parameter-entities", false);
3435
this.getDefaultLoadOptions().put(XMLResource.OPTION_PARSER_FEATURES, parserFeatures);
3536

3637
this.getDefaultSaveOptions().put(XMLResource.OPTION_ENCODING, "UTF-8");

0 commit comments

Comments
 (0)