Panagiotis Sotiropoulos ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *commented* on HHH-13960 ( https://hibernate.atlassian.net/browse/HHH-13960?atlOrigin=eyJpIjoiZjI4ZW... ) Re: Add SAXReader sec features to match the defaults ( https://hibernate.atlassian.net/browse/HHH-13960?atlOrigin=eyJpIjoiZjI4ZW... ) The default SAXReader in the new dom4j version, has these security defaults. I think it would be a good idea, not to use fewer security SAXReader features than the default one. Maybe additional features are needed. ( https://hibernate.atlassian.net/browse/HHH-13960#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-13960#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=Em... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100125- sha1:af682b6 )