You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@uima.apache.org by cw...@apache.org on 2017/11/08 19:13:14 UTC
svn commit: r1814624 -
/uima/uima-as/trunk/uimaj-as-core/src/main/java/org/apache/uima/resourceSpecifier/factory/DeploymentDescriptorFactory.java
Author: cwiklik
Date: Wed Nov 8 19:13:14 2017
New Revision: 1814624
URL: http://svn.apache.org/viewvc?rev=1814624&view=rev
Log: (empty)
Modified:
uima/uima-as/trunk/uimaj-as-core/src/main/java/org/apache/uima/resourceSpecifier/factory/DeploymentDescriptorFactory.java
Modified: uima/uima-as/trunk/uimaj-as-core/src/main/java/org/apache/uima/resourceSpecifier/factory/DeploymentDescriptorFactory.java
URL: http://svn.apache.org/viewvc/uima/uima-as/trunk/uimaj-as-core/src/main/java/org/apache/uima/resourceSpecifier/factory/DeploymentDescriptorFactory.java?rev=1814624&r1=1814623&r2=1814624&view=diff
==============================================================================
--- uima/uima-as/trunk/uimaj-as-core/src/main/java/org/apache/uima/resourceSpecifier/factory/DeploymentDescriptorFactory.java (original)
+++ uima/uima-as/trunk/uimaj-as-core/src/main/java/org/apache/uima/resourceSpecifier/factory/DeploymentDescriptorFactory.java Wed Nov 8 19:13:14 2017
@@ -56,6 +56,17 @@ public final class DeploymentDescriptorF
public static UimaASDeploymentDescriptor createDeploymentDescriptor(String xmlDescriptor)
throws ResourceInitializationException {
try {
+ // secure the parser
+ org.apache.xmlbeans.XmlOptions options = new org.apache.xmlbeans.XmlOptions();
+ XMLReader xmlReader = XMLReaderFactory.createXMLReader();
+ xmlReader.setFeature("http://xml.org/sax/features/external-general-entities", false);
+ xmlReader.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
+ xmlReader.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd",false);
+ xmlReader.setFeature("http://apache.org/xml/features/disallow-doctype-decl",true);
+ options.setLoadUseXMLReader(xmlReader);
+
+ AnalysisEngineDeploymentDescriptionDocument.Factory.parse(new File(descriptorPath), options);
+
return new UimaASDeploymentDescriptorImpl(AnalysisEngineDeploymentDescriptionDocument.Factory.parse(xmlDescriptor),new ServiceContextImpl("","","","") );
} catch( XmlException e ) {
throw new ResourceInitializationException(e);