You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@opennlp.apache.org by "Richard Zowalla (Jira)" <ji...@apache.org> on 2026/06/03 05:54:00 UTC

[jira] [Updated] (OPENNLP-1835) Tolerate unsupported XML parser security options

     [ https://issues.apache.org/jira/browse/OPENNLP-1835?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Richard Zowalla updated OPENNLP-1835:
-------------------------------------
    Affects Version/s: 3.0.0-M3
                       2.5.9

> Tolerate unsupported XML parser security options
> ------------------------------------------------
>
>                 Key: OPENNLP-1835
>                 URL: https://issues.apache.org/jira/browse/OPENNLP-1835
>             Project: OpenNLP
>          Issue Type: Improvement
>    Affects Versions: 2.5.9, 3.0.0-M3
>            Reporter: Richard Zowalla
>            Priority: Major
>             Fix For: 2.5.10, 3.0.0
>
>
> OpenNLP 2.5.9 added stricter XML parser hardening in XmlUtil, including JAXP external-access properties, implementation-specific parser features, and XInclude configuration.
> Some XML parser providers, including Android's, reject these optional settings even though they can still create a usable secure parser. This caused XmlUtil.createDocumentBuilder() to fail during OpenNLP model initialization on Android.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)