[jbossws-commits] JBossWS SVN: r12887 - common/branches/jbossws-common-1.1.0.SP2_CP01_JBPAPP-4647/src/main/java/org/jboss/wsf/common.

[jbossws-commits at lists.jboss.org]

Author: darran.lofthouse at jboss.com
Date: 2010-09-02 10:45:16 -0400 (Thu, 02 Sep 2010)
New Revision: 12887

Modified:
   common/branches/jbossws-common-1.1.0.SP2_CP01_JBPAPP-4647/src/main/java/org/jboss/wsf/common/DOMUtils.java
Log:
[JBPAPP-4647] Disable external-general-entities and external-parameter-entities.

Modified: common/branches/jbossws-common-1.1.0.SP2_CP01_JBPAPP-4647/src/main/java/org/jboss/wsf/common/DOMUtils.java
===================================================================
--- common/branches/jbossws-common-1.1.0.SP2_CP01_JBPAPP-4647/src/main/java/org/jboss/wsf/common/DOMUtils.java	2010-09-02 12:59:13 UTC (rev 12886)
+++ common/branches/jbossws-common-1.1.0.SP2_CP01_JBPAPP-4647/src/main/java/org/jboss/wsf/common/DOMUtils.java	2010-09-02 14:45:16 UTC (rev 12887)
@@ -92,6 +92,8 @@
                {
                   factory.setFeature(DEFER_NODE_EXPANSION_FEATURE, false);
                }
+               factory.setFeature("http://xml.org/sax/features/external-general-entities", false);
+               factory.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
             }
             catch (ParserConfigurationException pce)
             {