Merge pull request #256 from hazendaz/master

Redo transformer fix - sonar is wrong and has a jira from July on the issue
mybatis · Sep 26, 2024 · a82bf3f · a82bf3f
2 parents 260b4d2 + ed88388
commit a82bf3f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/main/java/com/ibatis/sqlmap/engine/mapping/statement/RowHandlerCallback.java b/src/main/java/com/ibatis/sqlmap/engine/mapping/statement/RowHandlerCallback.java
@@ -24,6 +24,7 @@
 import java.sql.ResultSet;
 import java.sql.SQLException;
 
+import javax.xml.XMLConstants;
 import javax.xml.transform.Transformer;
 import javax.xml.transform.TransformerException;
 import javax.xml.transform.TransformerFactory;
@@ -108,6 +109,8 @@ private String documentToString(Document document) {
 
     try {
       TransformerFactory tFactory = TransformerFactory.newInstance();
+      tFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
+      tFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "");
       Transformer transformer = tFactory.newTransformer();
 
       DOMSource source = new DOMSource(document);