From 76ebe97f24f40f36caebfac51a4f4d159393ba1a Mon Sep 17 00:00:00 2001 From: Igor I Date: Fri, 28 Mar 2025 13:22:42 +0500 Subject: [PATCH] dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); --- src/main/java/org/ccalm/main/AcceptASDCController.java | 1 + src/main/java/org/ccalm/main/DownloadNDVI.java | 1 + src/main/java/org/ccalm/main/engine/EngineController.java | 1 + 3 files changed, 3 insertions(+) diff --git a/src/main/java/org/ccalm/main/AcceptASDCController.java b/src/main/java/org/ccalm/main/AcceptASDCController.java index fb12079..7c85759 100644 --- a/src/main/java/org/ccalm/main/AcceptASDCController.java +++ b/src/main/java/org/ccalm/main/AcceptASDCController.java @@ -1130,6 +1130,7 @@ public class AcceptASDCController implements ServletContextAware { try { DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance(); + dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); DocumentBuilder dBuilder = dbFactory.newDocumentBuilder(); doc = dBuilder.parse(body); } catch (Exception ex) { diff --git a/src/main/java/org/ccalm/main/DownloadNDVI.java b/src/main/java/org/ccalm/main/DownloadNDVI.java index a0c8485..f3d4f7d 100644 --- a/src/main/java/org/ccalm/main/DownloadNDVI.java +++ b/src/main/java/org/ccalm/main/DownloadNDVI.java @@ -62,6 +62,7 @@ public class DownloadNDVI implements ServletContextAware { //String fullPath = context.getRealPath("/WEB-INF/config.xml"); //File fXmlFile = new File(fullPath); DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance(); + dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); DocumentBuilder dBuilder = dbFactory.newDocumentBuilder(); //Document doc = dBuilder.parse(fXmlFile); Document doc = dBuilder.parse(new ClassPathResource("config.xml").getInputStream()); diff --git a/src/main/java/org/ccalm/main/engine/EngineController.java b/src/main/java/org/ccalm/main/engine/EngineController.java index f76d235..922c656 100644 --- a/src/main/java/org/ccalm/main/engine/EngineController.java +++ b/src/main/java/org/ccalm/main/engine/EngineController.java @@ -174,6 +174,7 @@ public class EngineController implements ServletContextAware { Document doc = null; try { DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance(); + dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); DocumentBuilder dBuilder = dbFactory.newDocumentBuilder(); doc = dBuilder.parse(isXML); } catch (Exception ex) {