openhtmltopdf icon indicating copy to clipboard operation
openhtmltopdf copied to clipboard

Error is logged when the TransformerFactory implementation does not allow setting attributes

Open tomzanger opened this issue 3 years ago • 0 comments

In the setTranformerFactorySecurityFeatures method of XMLResource.java, the implementation of TransformerFactory may not accept modifications to certain attributes using the setAttribute method (e.g. in org.apache.xalan.processor.TransformerFactoryImpl). The XMLResource should first check to see if getFeature() returns the appropriate value (i.e. it may default to false), in which case it can skip attempting to set them and avoid erroneously logging a SEVERE message implying that XML External Entities are enabled.

tomzanger avatar Feb 01 '22 21:02 tomzanger