You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@pdfbox.apache.org by ms...@apache.org on 2020/11/24 10:00:25 UTC

svn commit: r1883783 - /pdfbox/trunk/tools/src/main/java/org/apache/pdfbox/tools/imageio/MetaUtil.java

Author: msahyoun
Date: Tue Nov 24 10:00:24 2020
New Revision: 1883783

URL: http://svn.apache.org/viewvc?rev=1883783&view=rev
Log:
PDFBOX-4892: Sonar fix; disable external processing

Modified:
    pdfbox/trunk/tools/src/main/java/org/apache/pdfbox/tools/imageio/MetaUtil.java

Modified: pdfbox/trunk/tools/src/main/java/org/apache/pdfbox/tools/imageio/MetaUtil.java
URL: http://svn.apache.org/viewvc/pdfbox/trunk/tools/src/main/java/org/apache/pdfbox/tools/imageio/MetaUtil.java?rev=1883783&r1=1883782&r2=1883783&view=diff
==============================================================================
--- pdfbox/trunk/tools/src/main/java/org/apache/pdfbox/tools/imageio/MetaUtil.java (original)
+++ pdfbox/trunk/tools/src/main/java/org/apache/pdfbox/tools/imageio/MetaUtil.java Tue Nov 24 10:00:24 2020
@@ -61,6 +61,8 @@ public final class MetaUtil
             StringWriter xmlStringWriter = new StringWriter();
             StreamResult streamResult = new StreamResult(xmlStringWriter);
             TransformerFactory transformerFactory = TransformerFactory.newInstance();
+            transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
+            transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "");
             transformerFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
             Transformer transformer = transformerFactory.newTransformer();
             // see http://stackoverflow.com/a/1264872/535646