Changeset 16560 in josm for trunk/src/org/openstreetmap/josm/tools

Timestamp:

2020-06-07T17:19:38+02:00 (4 years ago)

Author:

simon04

Message:

fix #19286 - External entities are resolved when parsing tagging presets (patch by hiddewie, modified)

File:

• trunk/src/org/openstreetmap/josm/tools/XmlUtils.java (modified) (2 diffs)

trunk/src/org/openstreetmap/josm/tools/XmlUtils.java

@@ -35 +35 @@
  */
 public final class XmlUtils {
+
+    private static final String FEATURE_DISALLOW_DOCTYPE_DECL = "http://apache.org/xml/features/disallow-doctype-decl";
 
     private XmlUtils() {
@@ -101 +103 @@
         SAXParserFactory parserFactory = SAXParserFactory.newInstance();
         parserFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
+        parserFactory.setFeature(FEATURE_DISALLOW_DOCTYPE_DECL, true);
         parserFactory.setNamespaceAware(true);
         return parserFactory.newSAXParser();