You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@ws.apache.org by co...@apache.org on 2018/12/03 15:40:40 UTC

svn commit: r1848055 - /webservices/xmlschema/trunk/xmlschema-core/src/main/java/org/apache/ws/commons/schema/XmlSchema.java

Author: coheigea
Date: Mon Dec  3 15:40:40 2018
New Revision: 1848055

URL: http://svn.apache.org/viewvc?rev=1848055&view=rev
Log:
Setting secure processing feature on the TransformerFactory

Modified:
    webservices/xmlschema/trunk/xmlschema-core/src/main/java/org/apache/ws/commons/schema/XmlSchema.java

Modified: webservices/xmlschema/trunk/xmlschema-core/src/main/java/org/apache/ws/commons/schema/XmlSchema.java
URL: http://svn.apache.org/viewvc/webservices/xmlschema/trunk/xmlschema-core/src/main/java/org/apache/ws/commons/schema/XmlSchema.java?rev=1848055&r1=1848054&r2=1848055&view=diff
==============================================================================
--- webservices/xmlschema/trunk/xmlschema-core/src/main/java/org/apache/ws/commons/schema/XmlSchema.java (original)
+++ webservices/xmlschema/trunk/xmlschema-core/src/main/java/org/apache/ws/commons/schema/XmlSchema.java Mon Dec  3 15:40:40 2018
@@ -878,6 +878,7 @@ public class XmlSchema extends XmlSchema
             xser.setExtReg(this.parent.getExtReg());
             Document[] serializedSchemas = xser.serializeSchema(this, false);
             TransformerFactory trFac = TransformerFactory.newInstance();
+            trFac.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE);
 
             try {
                 trFac.setAttribute("indent-number", "4");