Bug 63005 - should disable DTD altogether
Summary: should disable DTD altogether
Status: RESOLVED FIXED
Alias: None
Product: POI
Classification: Unclassified
Component: POI Overall (show other bugs)
Version: 4.0.0-FINAL
Hardware: PC Mac OS X 10.1
: P2 normal (vote)
Target Milestone: ---
Assignee: POI Developers List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-12-11 22:07 UTC by PJ Fanning
Modified: 2018-12-17 19:07 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description PJ Fanning 2018-12-11 22:07:48 UTC 
`factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);`

Lowers the chances of XML security issues.