See: https://github.com/mapfish/mapfish-print/security/code-scanning/…

…3?query=ref%3Arefs%2Fheads%2Fmaster
mapfish · Jul 2, 2020 · e1d0527 · e1d0527
1 parent 4b59454
commit e1d0527
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/core/src/main/java/org/mapfish/print/map/style/SLDParserPlugin.java b/core/src/main/java/org/mapfish/print/map/style/SLDParserPlugin.java
@@ -94,6 +94,7 @@ private Optional<Style> tryLoadSLD(
             // by setting a custom error handler.
             DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
             dbf.setNamespaceAware(true);
+            dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
             DocumentBuilder db = dbf.newDocumentBuilder();
             db.setErrorHandler(new ErrorHandler());
             db.parse(new ByteArrayInputStream(bytes));