diff options
Diffstat (limited to 'zookeeper-jute')
| -rw-r--r-- | zookeeper-jute/src/main/java/org/apache/jute/XmlInputArchive.java | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/zookeeper-jute/src/main/java/org/apache/jute/XmlInputArchive.java b/zookeeper-jute/src/main/java/org/apache/jute/XmlInputArchive.java index 99e11d10e..a4ae9381c 100644 --- a/zookeeper-jute/src/main/java/org/apache/jute/XmlInputArchive.java +++ b/zookeeper-jute/src/main/java/org/apache/jute/XmlInputArchive.java @@ -143,6 +143,8 @@ class XmlInputArchive implements InputArchive { valList = new ArrayList<Value>(); DefaultHandler handler = new XMLParser(valList); SAXParserFactory factory = SAXParserFactory.newInstance(); + factory.setFeature(javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE); + factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true); SAXParser parser = factory.newSAXParser(); parser.parse(in, handler); vLen = valList.size(); |