cxf-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From cohei...@apache.org
Subject [cxf-build-utils] 02/02: Adding secure processing to the SAXParserFactory
Date Fri, 14 Dec 2018 16:16:34 GMT
This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cxf-build-utils.git

commit 3e180752a42936cdc5fe11b6003e7e4b13436e13
Author: Colm O hEigeartaigh <coheigea@apache.org>
AuthorDate: Fri Dec 14 16:16:15 2018 +0000

    Adding secure processing to the SAXParserFactory
---
 .../cxf/maven_plugin/xml2fastinfoset/XML2FastInfosetCompilerMojo.java    | 1 +
 1 file changed, 1 insertion(+)

diff --git a/xml2fastinfoset-plugin/src/main/java/org/apache/cxf/maven_plugin/xml2fastinfoset/XML2FastInfosetCompilerMojo.java
b/xml2fastinfoset-plugin/src/main/java/org/apache/cxf/maven_plugin/xml2fastinfoset/XML2FastInfosetCompilerMojo.java
index 4d36b70..75b4bf2 100644
--- a/xml2fastinfoset-plugin/src/main/java/org/apache/cxf/maven_plugin/xml2fastinfoset/XML2FastInfosetCompilerMojo.java
+++ b/xml2fastinfoset-plugin/src/main/java/org/apache/cxf/maven_plugin/xml2fastinfoset/XML2FastInfosetCompilerMojo.java
@@ -210,6 +210,7 @@ public class XML2FastInfosetCompilerMojo extends AbstractMojo {
 
         // Instantiate JAXP SAX parser factory
         SAXParserFactory saxParserFactory = SAXParserFactory.newInstance();
+        saxParserFactory.setFeature(javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE);
         /*
          * Set parser to be namespace aware Very important to do otherwise
          * invalid FI documents will be created by the SAXDocumentSerializer


Mime
View raw message