fix xml security issue

tonyqus · Nov 12, 2015 · 9f402aa · 9f402aa
1 parent 7085e0f
commit 9f402aa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ooxml/openxml4Net/Util/XmlHelper.cs b/ooxml/openxml4Net/Util/XmlHelper.cs
@@ -315,10 +315,10 @@ public static void LoadXmlSafe(XmlDocument xmlDoc, Stream stream)
         {
             XmlReaderSettings settings = new XmlReaderSettings();
             //Disable entity parsing (to aviod xmlbombs, External Entity Attacks etc).
+            settings.XmlResolver = null;
             settings.ProhibitDtd = true;
             //settings.MaxCharactersFromEntities = 4096;
             //settings.ValidationType = ValidationType.DTD;
-
             XmlReader reader = XmlReader.Create(stream, settings);
             xmlDoc.Load(reader);
         }