Author: scheu Date: Fri Jun 4 12:03:34 2010 New Revision: 951385 URL: http://svn.apache.org/viewvc?rev=951385&view=rev Log: AXIS2-4450 Don't allow DTD's in MTOMBuilder flow.
Modified: axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java Modified: axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java URL: http://svn.apache.org/viewvc/axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java?rev=951385&r1=951384&r2=951385&view=diff ============================================================================== --- axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java (original) +++ axis/axis2/java/core/trunk/modules/kernel/src/org/apache/axis2/builder/MTOMBuilder.java Fri Jun 4 12:03:34 2010 @@ -22,6 +22,7 @@ package org.apache.axis2.builder; import org.apache.axiom.attachments.Attachments; import org.apache.axiom.om.OMElement; import org.apache.axiom.om.impl.builder.StAXBuilder; +import org.apache.axiom.om.util.StAXParserConfiguration; import org.apache.axiom.om.util.StAXUtils; import org.apache.axiom.soap.SOAPEnvelope; import org.apache.axiom.soap.impl.builder.MTOMStAXSOAPModelBuilder; @@ -51,7 +52,7 @@ public class MTOMBuilder implements Buil String actualCharSetEncoding = BuilderUtil.getCharSetEncoding(pis, charSetEncoding); // Get the XMLStreamReader for this input stream - streamReader = StAXUtils.createXMLStreamReader(pis, actualCharSetEncoding); + streamReader = StAXUtils.createXMLStreamReader(StAXParserConfiguration.SOAP, pis, actualCharSetEncoding); StAXBuilder builder = new MTOMStAXSOAPModelBuilder(streamReader, attachments); SOAPEnvelope envelope = (SOAPEnvelope) builder.getDocumentElement();