mirror of
https://gitflic.ru/project/openide/openide.git
synced 2026-09-27 10:03:11 +07:00
IDEA-165350 XXE Injection with Maven
This commit is contained in:
@@ -795,7 +795,7 @@ public class MavenUtil {
|
||||
final CRC32 crc = new CRC32();
|
||||
|
||||
SAXParser parser = SAXParserFactory.newInstance().newSAXParser();
|
||||
|
||||
parser.getXMLReader().setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
|
||||
parser.parse(in, new DefaultHandler(){
|
||||
|
||||
boolean textContentOccur = false;
|
||||
|
||||
Reference in New Issue
Block a user