Merge pull request #1077 from NASA-PDS/update_xxe_prevention

Update XXE prevention code
NASA-PDS · Dec 2, 2024 · d226e14 · d226e14
2 parents 137433c + f0cd7b2
commit d226e14
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/src/main/java/gov/nasa/pds/tools/validate/rule/pds4/SchemaValidator.java b/src/main/java/gov/nasa/pds/tools/validate/rule/pds4/SchemaValidator.java
@@ -71,8 +71,6 @@ public SchemaValidator() {
     schemaFactory = SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);
     try {
       schemaFactory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
-      schemaFactory.setFeature("http://xml.org/sax/features/external-general-entities", false);
-      schemaFactory.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
     } catch (SAXNotRecognizedException | SAXNotSupportedException e) {
       LOG.error("Error setting SchemaFactory features to prevent XXE", e);
     }