From 4d89fa704067c38d60e0a52dd6cbe0234e44f2ea Mon Sep 17 00:00:00 2001
From: Dmitry Avdeev <dmitry.avdeev@jetbrains.com>
Date: Mon, 12 Dec 2016 21:04:17 +0300
Subject: [PATCH] IDEA-165350 XXE Injection with Maven

---
 .../src/main/java/org/jetbrains/idea/maven/utils/MavenUtil.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/maven/src/main/java/org/jetbrains/idea/maven/utils/MavenUtil.java b/plugins/maven/src/main/java/org/jetbrains/idea/maven/utils/MavenUtil.java
index d763e67cf50d..0d048a794174 100644
--- a/plugins/maven/src/main/java/org/jetbrains/idea/maven/utils/MavenUtil.java
+++ b/plugins/maven/src/main/java/org/jetbrains/idea/maven/utils/MavenUtil.java
@@ -795,7 +795,7 @@ public class MavenUtil {
       final CRC32 crc = new CRC32();
 
       SAXParser parser = SAXParserFactory.newInstance().newSAXParser();
-
+      parser.getXMLReader().setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
       parser.parse(in, new DefaultHandler(){
 
         boolean textContentOccur = false;