This is an automated email from the ASF dual-hosted git repository. tallison pushed a commit to branch xmlinputfactory-dry in repository https://gitbox.apache.org/repos/asf/tika.git
commit a04836256fed54be68b56a7f4b10063cc7676b75 Author: tallison <[email protected]> AuthorDate: Mon Aug 4 07:55:47 2025 -0400 Improve configuration of xmlinputfactory --- tika-core/src/main/java/org/apache/tika/utils/XMLReaderUtils.java | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tika-core/src/main/java/org/apache/tika/utils/XMLReaderUtils.java b/tika-core/src/main/java/org/apache/tika/utils/XMLReaderUtils.java index 99ba32cc2..6ac89ee4e 100644 --- a/tika-core/src/main/java/org/apache/tika/utils/XMLReaderUtils.java +++ b/tika-core/src/main/java/org/apache/tika/utils/XMLReaderUtils.java @@ -308,6 +308,8 @@ public class XMLReaderUtils implements Serializable { tryToSetStaxProperty(factory, XMLInputFactory.IS_NAMESPACE_AWARE, true); tryToSetStaxProperty(factory, XMLInputFactory.IS_VALIDATING, false); + tryToSetStaxProperty(factory, XMLInputFactory.SUPPORT_DTD, false); + tryToSetStaxProperty(factory, XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIES, false); factory.setXMLResolver(IGNORING_STAX_ENTITY_RESOLVER); trySetStaxSecurityManager(factory);
