diff options
| author | Boris Grozev <boris@jitsi.org> | 2014-12-04 14:21:52 +0200 |
|---|---|---|
| committer | Boris Grozev <boris@jitsi.org> | 2014-12-04 14:21:52 +0200 |
| commit | b1e75a29614352a74693c838be234238aaa2fb0f (patch) | |
| tree | 02091a628366eab2c7481965e43dafd4234d3e55 /src/net/java/sip/communicator/service | |
| parent | 96bb3746a3ad194ec76b43b63aecf9aaba6968d2 (diff) | |
| download | jitsi-b1e75a29614352a74693c838be234238aaa2fb0f.zip jitsi-b1e75a29614352a74693c838be234238aaa2fb0f.tar.gz jitsi-b1e75a29614352a74693c838be234238aaa2fb0f.tar.bz2 | |
Disable XML external entities before parsing.
Diffstat (limited to 'src/net/java/sip/communicator/service')
| -rw-r--r-- | src/net/java/sip/communicator/service/protocol/media/ConferenceInfoDocument.java | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/net/java/sip/communicator/service/protocol/media/ConferenceInfoDocument.java b/src/net/java/sip/communicator/service/protocol/media/ConferenceInfoDocument.java index 2641fce..3d8778c 100644 --- a/src/net/java/sip/communicator/service/protocol/media/ConferenceInfoDocument.java +++ b/src/net/java/sip/communicator/service/protocol/media/ConferenceInfoDocument.java @@ -224,8 +224,11 @@ public class ConferenceInfoDocument try { + DocumentBuilderFactory factory + = DocumentBuilderFactory.newInstance(); + XMLUtils.disableExternalEntities(factory); document - = DocumentBuilderFactory.newInstance().newDocumentBuilder() + = factory.newDocumentBuilder() .parse(new ByteArrayInputStream(bytes)); } catch (Exception e) |