Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2026-01-30 19:29:11 +01:00
Code Issues Packages Projects Releases Activity

fix sonarqube warning about xxe processing

Browse Source
This commit is contained in:
Sebastian Sdorra
2019-11-28 10:45:57 +01:00
parent bfcc9bf4a6
commit 312fb9bb05
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
scm-dao-xml/src/main/java/sonia/scm/xml/XmlStreams.java
View File

@@ -52,7 +52,9 @@ public final class XmlStreams {
}
private static XMLStreamReader createReader(Reader reader) throws XMLStreamException {
return XMLInputFactory.newInstance().createXMLStreamReader(reader);
XMLInputFactory factory = XMLInputFactory.newInstance();
factory.setProperty(XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIES, Boolean.FALSE);
return factory.createXMLStreamReader(reader);
}