jetty.project icon indicating copy to clipboard operation
jetty.project copied to clipboard

Published 20 hours ago • verified publisher icon jetty

Issue #12403 - verify XML PublicID behaviors.

Open joakime opened this issue 1 year ago • 0 comments
trafficstars

  • The XmlConfiguration instance should not use an XML parser from the classloader. As that XML parser can be broken when it comes to XML entity resolution behaviors. (We always want local entity resolution, never external) Switching to SAXParserFactory.newDefaultInstance() ensures this behavior that we want/need.
  • More unit tests for behavior with and without XML PublicID's in the mix.

joakime avatar Oct 18 '24 21:10 joakime