TransformerFactory with secure defaults set. Properties not supported generate a warning, but the
factory process creation will continue and return a result.
Settings based on recommendations of
Sonarcloud RSPEC-2755 and
OWASP XML
External Entity Prevention Cheatsheet.
javax.xml.XMLConstants#FEATURE_SECURE_PROCESSING is set to true.javax.xml.XMLConstants#ACCESS_EXTERNAL_DTD is set to empty.javax.xml.XMLConstants#ACCESS_EXTERNAL_STYLESHEET is set to empty.| Modifier and Type | Field and Description |
|---|---|
| private static final AtomicBoolean |
| Access | Constructor and Description |
|---|---|
| private |
| Modifier and Type | Method and Description |
|---|---|
| public static TransformerFactory |
| TO_BE_LOGGED | back to summary |
|---|---|
| private static final AtomicBoolean TO_BE_LOGGED | |
| TransformerFactoryUtil | back to summary |
|---|---|
| private TransformerFactoryUtil() No instance. | |
| create | back to summary |
|---|---|
public static TransformerFactory create()
| |