Author: darran.lofthouse(a)jboss.com Date: 2010-07-14 09:14:32 -0400 (Wed, 14 Jul 2010) New Revision: 12643 Modified: common/branches/jbossws-common-1.0.0.GA_CP/src/main/java/org/jboss/wsf/common/DOMUtils.java Log: [JBPAPP-4646] Disable XML external entity resolver. Modified: common/branches/jbossws-common-1.0.0.GA_CP/src/main/java/org/jboss/wsf/common/DOMUtils.java =================================================================== --- common/branches/jbossws-common-1.0.0.GA_CP/src/main/java/org/jboss/wsf/common/DOMUtils.java 2010-07-14 12:15:47 UTC (rev 12642) +++ common/branches/jbossws-common-1.0.0.GA_CP/src/main/java/org/jboss/wsf/common/DOMUtils.java 2010-07-14 13:14:32 UTC (rev 12643) @@ -85,6 +85,7 @@ DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance(); factory.setValidating(false); factory.setNamespaceAware(true); + factory.setExpandEntityReferences(false); try {