Author: remy.maucherat(a)jboss.com Date: 2007-10-15 02:49:09 -0400 (Mon, 15 Oct 2007) New Revision: 310 Modified: branches/2.0.x/src/share/classes/org/apache/catalina/servlets/WebdavServlet.java Log: - Disable entity expansion. Modified: branches/2.0.x/src/share/classes/org/apache/catalina/servlets/WebdavServlet.java =================================================================== --- branches/2.0.x/src/share/classes/org/apache/catalina/servlets/WebdavServlet.java 2007-10-15 06:35:37 UTC (rev 309) +++ branches/2.0.x/src/share/classes/org/apache/catalina/servlets/WebdavServlet.java 2007-10-15 06:49:09 UTC (rev 310) @@ -242,6 +242,7 @@ try { documentBuilderFactory = DocumentBuilderFactory.newInstance(); documentBuilderFactory.setNamespaceAware(true); + documentBuilderFactory.setExpandEntityReferences(false); documentBuilder = documentBuilderFactory.newDocumentBuilder(); } catch(ParserConfigurationException e) { throw new ServletException