Return-Path: X-Original-To: apmail-chemistry-dev-archive@www.apache.org Delivered-To: apmail-chemistry-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 98DCC1784C for ; Mon, 30 Mar 2015 14:59:53 +0000 (UTC) Received: (qmail 21035 invoked by uid 500); 30 Mar 2015 14:59:53 -0000 Delivered-To: apmail-chemistry-dev-archive@chemistry.apache.org Received: (qmail 20981 invoked by uid 500); 30 Mar 2015 14:59:53 -0000 Mailing-List: contact dev-help@chemistry.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@chemistry.apache.org Delivered-To: mailing list dev@chemistry.apache.org Received: (qmail 20969 invoked by uid 99); 30 Mar 2015 14:59:53 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 30 Mar 2015 14:59:53 +0000 Date: Mon, 30 Mar 2015 14:59:53 +0000 (UTC) From: =?utf-8?Q?Florian_M=C3=BCller_=28JIRA=29?= To: dev@chemistry.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Resolved] (CMIS-902) XmlException: For security reasons DTD is prohibited in this XML document MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CMIS-902?page=3Dcom.atlassian.= jira.plugin.system.issuetabpanels:all-tabpanel ] Florian M=C3=BCller resolved CMIS-902. --------------------------------- Resolution: Fixed Fix Version/s: DotCMIS 0.7 I've used a different workaround because settings.DtdProcessing doesn't exi= st in .Net 3.5. (It has been introduced in .Net 4.) > XmlException: For security reasons DTD is prohibited in this XML document > ------------------------------------------------------------------------- > > Key: CMIS-902 > URL: https://issues.apache.org/jira/browse/CMIS-902 > Project: Chemistry > Issue Type: Bug > Components: dotcmis > Affects Versions: DotCMIS 0.6 > Environment: SharePoint Server 2013 > Documentum 6.7 SP1 > Reporter: Nicolas Raoul > Assignee: Florian M=C3=BCller > Labels: patch > Fix For: DotCMIS 0.7 > > Original Estimate: 1h > Remaining Estimate: 1h > > Hello DotCMIS, > Many people using SharePoint Server 2013 are reporting this error when pe= rforming a simple listing of a folder: > DotCMIS.Exceptions.CmisConnectionException: Parsing exception! ---> Syste= m.Xml.XmlException: For security reasons DTD is prohibited in this XML docu= ment. To enable DTD processing set the DtdProcessing property on XmlReaderS= ettings to Parse and pass the settings into XmlReader.Create method. > at System.Xml.XmlTextReaderImpl.Throw(Exception e) > at System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res) > at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl() > at System.Xml.XmlTextReaderImpl.ParseDocumentContent() > at System.Xml.XmlTextReaderImpl.Read() > at System.Xml.XmlReader.MoveToContent() > at System.Xml.XmlReader.IsStartElement() > at DotCMIS.Binding.AtomPub.AtomPubParser.Parse() > at DotCMIS.Binding.AtomPub.AbstractAtomPubService.Parse[T](Stream stre= am) > The problem is easily fixed by adding `settings.DtdProcessing =3D DtdProc= essing.Ignore;` in the Parse() method of atompub-parser.cs as seen in this = commit: https://github.com/aegif/chemistry-dotcmis/commit/ee7e5931b8c8cdfcb= bd280a1fb4956a8fcc895b8 > Full explanation and a note about DDOS (I don't think DotCMIS should be t= oo worried about DDOS, as it is mostly a client-side library): http://stack= overflow.com/a/28459398/226958 > Thank you! > Nicolas -- This message was sent by Atlassian JIRA (v6.3.4#6332)