Spring/spring-ws
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SWS-1050 - Backport to 2.x.

Browse Source
This commit is contained in:
Greg Turnquist
2019-03-14 20:40:10 -05:00
parent 587e9a9e3e
commit baf02216d3
1 changed files with 18 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
spring-xml/src/main/java/org/springframework/xml/transform/TransformerFactoryUtils.java
View File

@@ -19,12 +19,16 @@ import javax.xml.XMLConstants;
import javax.xml.transform.TransformerFactory;
import javax.xml.transform.TransformerFactoryConfigurationError;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
/**
* @author Greg Turnquist
* @since 3.0.5
* @since 2.4.6/3.0.5
*/
public class TransformerFactoryUtils {
private static final Log log = LogFactory.getLog(TransformerFactoryUtils.class);
/**
* Build a new {@link TransformerFactory} using the default constructor.
*/
@@ -53,8 +57,19 @@ public class TransformerFactoryUtils {
* Prevent external entities from accessing.
*/
private static TransformerFactory defaultSettings(TransformerFactory factory) {
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "");
try {
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
} catch (IllegalArgumentException e) {
if (log.isWarnEnabled()) {
log.warn(XMLConstants.ACCESS_EXTERNAL_DTD + " property not supported by " + factory.getClass().getCanonicalName());
}
}
try {
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "");
} catch (IllegalArgumentException e) {
if (log.isWarnEnabled()) {
log.warn(XMLConstants.ACCESS_EXTERNAL_STYLESHEET + " property not supported by " + factory.getClass().getCanonicalName());
} }
return factory;
}
}