You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tamaya.apache.org by po...@apache.org on 2019/05/11 23:16:58 UTC
[incubator-tamaya-sandbox] branch master updated: TAMAYA-277:
Properly fix XXE config, hopefully
This is an automated email from the ASF dual-hosted git repository.
pottlinger pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-tamaya-sandbox.git
The following commit(s) were added to refs/heads/master by this push:
new f799e04 TAMAYA-277: Properly fix XXE config, hopefully
f799e04 is described below
commit f799e046dbdd9186310f82c26121244ff982b06a
Author: Hugo Hirsch <gi...@hugo-hirsch.de>
AuthorDate: Sun May 12 01:16:53 2019 +0200
TAMAYA-277: Properly fix XXE config, hopefully
---
.../src/main/java/org/apache/tamaya/metamodel/MetaConfiguration.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/metamodel/src/main/java/org/apache/tamaya/metamodel/MetaConfiguration.java b/metamodel/src/main/java/org/apache/tamaya/metamodel/MetaConfiguration.java
index f4c7525..5c1faab 100644
--- a/metamodel/src/main/java/org/apache/tamaya/metamodel/MetaConfiguration.java
+++ b/metamodel/src/main/java/org/apache/tamaya/metamodel/MetaConfiguration.java
@@ -113,7 +113,7 @@ public final class MetaConfiguration {
Document document = null;
try {
final DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
- factory.setAttribute(XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE);
+ factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE);
document = factory.newDocumentBuilder().parse(configFile.openStream());
ConfigurationBuilder builder = Configuration.createConfigurationBuilder();