[
https://issues.apache.org/jira/browse/XERCESJ-1644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14106940#comment-14106940
]
Michael Glavassevich commented on XERCESJ-1644:
-----------------------------------------------
Hi, I'm guessing neither of you have been following the development mailing
list (see archive here [1]). There is already an XMLParserConfiguration (still
under development) that supports system property settings, similar to those
that have been introduced in the JDK. These need to be enabled by the
application. We cannot change default behaviour for various reasons, including
for compatibility and conformance to the JAXP standard.
[1] http://mail-archives.apache.org/mod_mbox/xerces-j-dev/
> RFE: Allow global enabling/disabling of features with secure defaults
> ---------------------------------------------------------------------
>
> Key: XERCESJ-1644
> URL: https://issues.apache.org/jira/browse/XERCESJ-1644
> Project: Xerces2-J
> Issue Type: Improvement
> Components: JAXP (javax.xml.parsers)
> Affects Versions: 2.11.0
> Reporter: Arun Babu Neelicattu
> Attachments: XERCESJ-1644.patch
>
>
> It would be useful to be able enable and disable features using a global
> configuration, either by using system properties or a property file or both.
> Possible usage via system properties:
> {noformat}
> -Dorg.apache.xerces.jaxp.features.enable=http://apache.org/xml/features/disallow-doctype-decl
> -Dorg.apache.xerces.jaxp.features.disable=http://xml.org/sax/features/external-general-entities,http://xml.org/sax/features/external-parameter-entities
> {noformat}
> Is this something that can be added?
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
