Author: bmaxwell Date: 2011-04-05 03:05:48 -0400 (Tue, 05 Apr 2011) New Revision: 14005 Modified: common/branches/jbossws-common-1.0.0.GA_CP05_JBPAPP-6242/ common/branches/jbossws-common-1.0.0.GA_CP05_JBPAPP-6242/src/main/java/org/jboss/wsf/common/DOMUtils.java Log: [JBPAPP-6242] Disable external-general-entities and external-parameter-entities. Property changes on: common/branches/jbossws-common-1.0.0.GA_CP05_JBPAPP-6242 ___________________________________________________________________ Modified: svn:mergeinfo - /common/branches/jbossws-common-1.0.0.GA_CP:12643 + /common/branches/jbossws-common-1.0.0.GA_CP:12643 /common/branches/jbossws-common-1.1.0.SP2_CP01_JBPAPP-4647:12887 Modified: common/branches/jbossws-common-1.0.0.GA_CP05_JBPAPP-6242/src/main/java/org/jboss/wsf/common/DOMUtils.java =================================================================== --- common/branches/jbossws-common-1.0.0.GA_CP05_JBPAPP-6242/src/main/java/org/jboss/wsf/common/DOMUtils.java 2011-04-05 07:05:05 UTC (rev 14004) +++ common/branches/jbossws-common-1.0.0.GA_CP05_JBPAPP-6242/src/main/java/org/jboss/wsf/common/DOMUtils.java 2011-04-05 07:05:48 UTC (rev 14005) @@ -94,6 +94,8 @@ { factory.setFeature(DEFER_NODE_EXPANSION_FEATURE, false); } + factory.setFeature("http://xml.org/sax/features/external-general-ent...;, false); + factory.setFeature("http://xml.org/sax/features/external-parameter-e...;, false); } catch (ParserConfigurationException pce) {