IDEA-165350 XXE Injection with Maven

This commit is contained in:
Dmitry Avdeev
2016-12-12 21:09:50 +03:00
parent 3fe842809b
commit 4d89fa7040
@@ -795,7 +795,7 @@ public class MavenUtil {
final CRC32 crc = new CRC32();
SAXParser parser = SAXParserFactory.newInstance().newSAXParser();
parser.getXMLReader().setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
parser.parse(in, new DefaultHandler(){
boolean textContentOccur = false;