Author: bmaxwell Date: 2011-04-05 03:05:05 -0400 (Tue, 05 Apr 2011) New Revision: 14004 Modified: common/branches/jbossws-common-1.0.0.GA_CP04_JBPAPP-6243/ common/branches/jbossws-common-1.0.0.GA_CP04_JBPAPP-6243/src/main/java/org/jboss/wsf/common/DOMUtils.java Log: [JBPAPP-6243] Disable external-general-entities and external-parameter-entities. Property changes on: common/branches/jbossws-common-1.0.0.GA_CP04_JBPAPP-6243 ___________________________________________________________________ Modified: svn:mergeinfo - /common/branches/jbossws-common-1.0.0.GA_CP:12643 + /common/branches/jbossws-common-1.0.0.GA_CP:12643 /common/branches/jbossws-common-1.1.0.SP2_CP01_JBPAPP-4647:12887 Modified: common/branches/jbossws-common-1.0.0.GA_CP04_JBPAPP-6243/src/main/java/org/jboss/wsf/common/DOMUtils.java =================================================================== --- common/branches/jbossws-common-1.0.0.GA_CP04_JBPAPP-6243/src/main/java/org/jboss/wsf/common/DOMUtils.java 2011-04-05 06:53:25 UTC (rev 14003) +++ common/branches/jbossws-common-1.0.0.GA_CP04_JBPAPP-6243/src/main/java/org/jboss/wsf/common/DOMUtils.java 2011-04-05 07:05:05 UTC (rev 14004) @@ -91,6 +91,8 @@ { factory.setFeature(DEFER_NODE_EXPANSION_FEATURE, false); } + factory.setFeature("http://xml.org/sax/features/external-general-ent...;, false); + factory.setFeature("http://xml.org/sax/features/external-parameter-e...;, false); } catch (ParserConfigurationException pce) {