#28 Disable downloading external resources by default.

(cherry picked from commit 53f923a)
dom4j · Apr 11, 2020 · 0c41e01 · 0c41e01
1 parent a16aaa7
commit 0c41e01
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/java/org/dom4j/io/SAXHelper.java b/src/main/java/org/dom4j/io/SAXHelper.java
@@ -108,8 +108,8 @@ public static XMLReader createXMLReader(boolean validating)
         SAXHelper.setParserFeature(reader, "http://xml.org/sax/features/namespace-prefixes", false);
 
         // external entites
-//        SAXHelper.setParserFeature(reader, "http://xml.org/sax/properties/external-general-entities", false);
-//        SAXHelper.setParserFeature(reader, "http://xml.org/sax/properties/external-parameter-entities", false);
+        SAXHelper.setParserFeature(reader, "http://xml.org/sax/properties/external-general-entities", false);
+        SAXHelper.setParserFeature(reader, "http://xml.org/sax/properties/external-parameter-entities", false);
 
         // external DTD
         SAXHelper.setParserFeature(reader,"http://apache.org/xml/features/nonvalidating/load-external-dtd", false);