Skip to content
This repository has been archived by the owner on Sep 13, 2022. It is now read-only.

Commit

Permalink
BZ1150634: switch off external-parameter-entity processing in XML parser
Browse files Browse the repository at this point in the history
  • Loading branch information
Jeremy Lindop committed Jan 5, 2015
1 parent 5641588 commit be3968d
Showing 1 changed file with 1 addition and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@ public JBPMBpmn2ResourceImpl(URI uri) {
// Switch off DTD external entity processing
Map parserFeatures = new HashMap();
parserFeatures.put("http://xml.org/sax/features/external-general-entities", false);
parserFeatures.put("http://xml.org/sax/features/external-parameter-entities", false);
this.getDefaultLoadOptions().put(XMLResource.OPTION_PARSER_FEATURES, parserFeatures);

this.getDefaultSaveOptions().put(XMLResource.OPTION_ENCODING, "UTF-8");
Expand Down

0 comments on commit be3968d

Please sign in to comment.