dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);

This commit is contained in:
Igor I
2025-03-28 13:22:42 +05:00
parent 43185b31ea
commit 76ebe97f24
3 changed files with 3 additions and 0 deletions

View File

@ -1130,6 +1130,7 @@ public class AcceptASDCController implements ServletContextAware {
try { try {
DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance(); DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance();
dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
DocumentBuilder dBuilder = dbFactory.newDocumentBuilder(); DocumentBuilder dBuilder = dbFactory.newDocumentBuilder();
doc = dBuilder.parse(body); doc = dBuilder.parse(body);
} catch (Exception ex) { } catch (Exception ex) {

View File

@ -62,6 +62,7 @@ public class DownloadNDVI implements ServletContextAware {
//String fullPath = context.getRealPath("/WEB-INF/config.xml"); //String fullPath = context.getRealPath("/WEB-INF/config.xml");
//File fXmlFile = new File(fullPath); //File fXmlFile = new File(fullPath);
DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance(); DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance();
dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
DocumentBuilder dBuilder = dbFactory.newDocumentBuilder(); DocumentBuilder dBuilder = dbFactory.newDocumentBuilder();
//Document doc = dBuilder.parse(fXmlFile); //Document doc = dBuilder.parse(fXmlFile);
Document doc = dBuilder.parse(new ClassPathResource("config.xml").getInputStream()); Document doc = dBuilder.parse(new ClassPathResource("config.xml").getInputStream());

View File

@ -174,6 +174,7 @@ public class EngineController implements ServletContextAware {
Document doc = null; Document doc = null;
try { try {
DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance(); DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance();
dbFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
DocumentBuilder dBuilder = dbFactory.newDocumentBuilder(); DocumentBuilder dBuilder = dbFactory.newDocumentBuilder();
doc = dBuilder.parse(isXML); doc = dBuilder.parse(isXML);
} catch (Exception ex) { } catch (Exception ex) {