Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Fix SAXParser security issue
  • Loading branch information
Haxatron authored and AngledLuffa committed Jan 12, 2022
1 parent 76666dd commit 1f52136
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions src/edu/stanford/nlp/process/TransformXML.java
Expand Up @@ -5,6 +5,7 @@
import java.io.*;
import java.util.*;

import javax.xml.XMLConstants;
import javax.xml.parsers.SAXParser;
import javax.xml.parsers.SAXParserFactory;

Expand Down Expand Up @@ -195,6 +196,8 @@ public void processText(String text) {

public TransformXML() {
try {
SAXParserFactory spf = SAXParserFactory.newInstance();
spf.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
saxParser = SAXParserFactory.newInstance().newSAXParser();
} catch (Exception e) {
log.info("Error configuring XML parser: " + e);
Expand Down

0 comments on commit 1f52136

Please sign in to comment.