Package org.wildfly.common.xml
Class SAXParserFactoryUtil
- java.lang.Object
-
- org.wildfly.common.xml.SAXParserFactoryUtil
-
public final class SAXParserFactoryUtil extends Object
Factory providesSAXParserFactorywith secure defaults set. Properties not supported generate a warning, but the factory process creation will continue and return a result. Settings based on recommendations of Sonarcloud RSPEC-2755 and OWASP XML External Entity Prevention Cheatsheet.XMLConstants.FEATURE_SECURE_PROCESSINGis set to true.FactoryConstants.APACHE_DISALLOW_DOCTYPE_DECLis set to true.FactoryConstants.XML_EXTERNAL_GENERAL_ENTITIESis set to false.FactoryConstants.XML_EXTERNAL_PARAMETER_ENTITIESis set to false.
- Since:
- 1.6.0.Final
- Author:
- Boris Unckel
-
-
Method Detail
-
create
@NotNull public static SAXParserFactory create()
-
-