improved security during xml parse

raydac · Dec 24, 2022 · 3a10e7e · 3a10e7e
1 parent 166c1ac
commit 3a10e7e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.../mind-map-swing-panel/src/main/java/com/igormaznitsa/mindmap/swing/panel/utils/Utils.java b/.../mind-map-swing-panel/src/main/java/com/igormaznitsa/mindmap/swing/panel/utils/Utils.java
@@ -212,7 +212,7 @@ public static Document loadXmlDocument(final InputStream inStream,
 
     try {
       factory.setFeature("http://apache.org/xml/features/validation/schema", false);
-      factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", false);
+      factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
       factory.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);
       factory.setFeature("http://xml.org/sax/features/external-general-entities", false);
       factory.setFeature("http://xml.org/sax/features/external-parameter-entities", false);