Skip to content

Commit 11508b2

Browse files
committed
Enable secure XML parsing
1 parent 8679a4a commit 11508b2

File tree

1 file changed

+2
-0
lines changed
  • modernizer-maven-plugin/src/main/java/org/gaul/modernizer_maven_plugin

1 file changed

+2
-0
lines changed

modernizer-maven-plugin/src/main/java/org/gaul/modernizer_maven_plugin/Modernizer.java

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@
2424
import java.util.Set;
2525
import java.util.regex.Pattern;
2626

27+
import javax.xml.XMLConstants;
2728
import javax.xml.parsers.DocumentBuilder;
2829
import javax.xml.parsers.DocumentBuilderFactory;
2930
import javax.xml.parsers.ParserConfigurationException;
@@ -86,6 +87,7 @@ public static Map<String, Violation> parseFromXml(InputStream is)
8687
Map<String, Violation> map =
8788
new HashMap<String, Violation>();
8889
DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance();
90+
dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
8991
DocumentBuilder dBuilder = dbFactory.newDocumentBuilder();
9092
Document doc = dBuilder.parse(is);
9193
doc.getDocumentElement().normalize();

0 commit comments

Comments
 (0)