Author: scheu
Date: Fri Jun  4 12:03:34 2010
New Revision: 951385

URL: http://svn.apache.org/viewvc?rev=951385&view=rev
Log:
AXIS2-4450
Don't allow DTD's in MTOMBuilder flow. 

Modified:
    
axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java

Modified: 
axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java
URL: 
http://svn.apache.org/viewvc/axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java?rev=951385&r1=951384&r2=951385&view=diff
==============================================================================
--- 
axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java
 (original)
+++ 
axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java
 Fri Jun  4 12:03:34 2010
@@ -22,6 +22,7 @@ package org.apache.axis2.builder;
 import org.apache.axiom.attachments.Attachments;
 import org.apache.axiom.om.OMElement;
 import org.apache.axiom.om.impl.builder.StAXBuilder;
+import org.apache.axiom.om.util.StAXParserConfiguration;
 import org.apache.axiom.om.util.StAXUtils;
 import org.apache.axiom.soap.SOAPEnvelope;
 import org.apache.axiom.soap.impl.builder.MTOMStAXSOAPModelBuilder;
@@ -51,7 +52,7 @@ public class MTOMBuilder implements Buil
             String actualCharSetEncoding = BuilderUtil.getCharSetEncoding(pis, 
charSetEncoding);
             
             // Get the XMLStreamReader for this input stream
-            streamReader = StAXUtils.createXMLStreamReader(pis, 
actualCharSetEncoding);        
+            streamReader = 
StAXUtils.createXMLStreamReader(StAXParserConfiguration.SOAP, pis, 
actualCharSetEncoding);        
             StAXBuilder builder = new MTOMStAXSOAPModelBuilder(streamReader,
                     attachments);
             SOAPEnvelope envelope = (SOAPEnvelope) 
builder.getDocumentElement();


Reply via email to