You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@ws.apache.org by co...@apache.org on 2019/06/17 11:37:34 UTC

svn commit: r1861501 - /webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java

Author: coheigea
Date: Mon Jun 17 11:37:34 2019
New Revision: 1861501

URL: http://svn.apache.org/viewvc?rev=1861501&view=rev
Log:
Disabling doctypes in EncryptionUtils

Modified:
    webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java

Modified: webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java
URL: http://svn.apache.org/viewvc/webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java?rev=1861501&r1=1861500&r2=1861501&view=diff
==============================================================================
--- webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java (original)
+++ webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java Mon Jun 17 11:37:34 2019
@@ -393,12 +393,12 @@ public final class EncryptionUtils {
 
         Document document = null;
         try {
-            document = org.apache.xml.security.utils.XMLUtils.read(new ByteArrayInputStream(bytes), false);
+            document = org.apache.xml.security.utils.XMLUtils.read(new ByteArrayInputStream(bytes));
         } catch (SAXException ex) {
             // A prefix may not have been bound, try to fix the DOM Element in this case.
             String fixedElementStr = setParentPrefixes(encData, new String(bytes));
             document = org.apache.xml.security.utils.XMLUtils.read(
-                new ByteArrayInputStream(fixedElementStr.getBytes()), false);
+                new ByteArrayInputStream(fixedElementStr.getBytes()));
         }
 
         Node decryptedNode =