fix #1851 add FEATURE_SECURE_PROCESSING

This commit is contained in:
Shinsuke Sugaya 2018-09-29 22:08:46 +09:00
parent ceaaa4e5e7
commit faa265b8d8

View file

@ -26,6 +26,7 @@ import java.util.Map;
import java.util.regex.Pattern;
import java.util.stream.Collectors;
import javax.xml.XMLConstants;
import javax.xml.parsers.SAXParser;
import javax.xml.parsers.SAXParserFactory;
@ -90,6 +91,7 @@ public class GsaConfigParser extends DefaultHandler {
public void parse(final InputSource is) {
try {
final SAXParserFactory factory = SAXParserFactory.newInstance();
factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
final SAXParser parser = factory.newSAXParser();
parser.parse(is, this);
} catch (final Exception e) {