From 5df301e8131ceb7dbd903c39d2ac479ec6e4fdcd Mon Sep 17 00:00:00 2001
From: Reijer Copier <reijer.copier@idgis.nl>
Date: Wed, 8 May 2024 17:49:27 +0200
Subject: [PATCH] Enable FEATURE_SECURE_PROCESSING

---
 .../src/main/java/org/deegree/commons/xml/XsltUtils.java         | 1 +
 1 file changed, 1 insertion(+)

diff --git a/deegree-core/deegree-core-commons/src/main/java/org/deegree/commons/xml/XsltUtils.java b/deegree-core/deegree-core-commons/src/main/java/org/deegree/commons/xml/XsltUtils.java
index f2f37a69be9..72f619abc30 100644
--- a/deegree-core/deegree-core-commons/src/main/java/org/deegree/commons/xml/XsltUtils.java
+++ b/deegree-core/deegree-core-commons/src/main/java/org/deegree/commons/xml/XsltUtils.java
@@ -72,6 +72,7 @@ public static void transform(InputStream doc, URL xsltUrl, OutputStream out)
 		StreamSource source = new StreamSource(doc);
 		StreamSource xslt = new StreamSource(new File(xsltUrl.toURI()));
 		TransformerFactory fac = TransformerFactory.newInstance();
+		fac.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
 		Transformer t = fac.newTransformer(xslt);
 		Result result = new StreamResult(out);
 		t.transform(source, result);