You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the setTranformerFactorySecurityFeatures method of XMLResource.java, the implementation of TransformerFactory may not accept modifications to certain attributes using the setAttribute method (e.g. in org.apache.xalan.processor.TransformerFactoryImpl). The XMLResource should first check to see if getFeature() returns the appropriate value (i.e. it may default to false), in which case it can skip attempting to set them and avoid erroneously logging a SEVERE message implying that XML External Entities are enabled.
The text was updated successfully, but these errors were encountered:
tomzanger
added a commit
to tomzanger/openhtmltopdf
that referenced
this issue
Feb 1, 2022
In the setTranformerFactorySecurityFeatures method of XMLResource.java, the implementation of TransformerFactory may not accept modifications to certain attributes using the setAttribute method (e.g. in org.apache.xalan.processor.TransformerFactoryImpl). The XMLResource should first check to see if getFeature() returns the appropriate value (i.e. it may default to false), in which case it can skip attempting to set them and avoid erroneously logging a SEVERE message implying that XML External Entities are enabled.
The text was updated successfully, but these errors were encountered: