SAXParserFactory with secure defaults set. Properties not supported generate a warning, but the
factory process creation will continue and return a result.
Settings based on recommendations of
Sonarcloud RSPEC-2755 and
OWASP XML
External Entity Prevention Cheatsheet.
javax.xml.XMLConstants#FEATURE_SECURE_PROCESSING is set to true.org.wildfly.common.xml.FactoryConstants#APACHE_DISALLOW_DOCTYPE_DECL is set to true.org.wildfly.common.xml.FactoryConstants#XML_EXTERNAL_GENERAL_ENTITIES is set to false.org.wildfly.common.xml.FactoryConstants#XML_EXTERNAL_PARAMETER_ENTITIES is set to false.| Modifier and Type | Field and Description |
|---|---|
| private static final AtomicBoolean |
| Access | Constructor and Description |
|---|---|
| private |
| Modifier and Type | Method and Description |
|---|---|
| public static SAXParserFactory |
| TO_BE_LOGGED | back to summary |
|---|---|
| private static final AtomicBoolean TO_BE_LOGGED | |
| SAXParserFactoryUtil | back to summary |
|---|---|
| private SAXParserFactoryUtil() No instance. | |
| create | back to summary |
|---|---|
public static SAXParserFactory create()
| |