Enable FEATURE_SECURE_PROCESSING

copierrj · May 8, 2024 · 5df301e · 5df301e
1 parent 55e6484
commit 5df301e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/deegree-core/deegree-core-commons/src/main/java/org/deegree/commons/xml/XsltUtils.java b/deegree-core/deegree-core-commons/src/main/java/org/deegree/commons/xml/XsltUtils.java
@@ -72,6 +72,7 @@ public static void transform(InputStream doc, URL xsltUrl, OutputStream out)
 		StreamSource source = new StreamSource(doc);
 		StreamSource xslt = new StreamSource(new File(xsltUrl.toURI()));
 		TransformerFactory fac = TransformerFactory.newInstance();
+		fac.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
 		Transformer t = fac.newTransformer(xslt);
 		Result result = new StreamResult(out);
 		t.transform(source, result);