1 files changed, 5 insertions, 2 deletions
diff --git a/src/net/java/sip/communicator/plugin/jabberaccregwizz/JabberServerChooserDialog.java b/src/net/java/sip/communicator/plugin/jabberaccregwizz/JabberServerChooserDialog.java
index 9abaad6..9737a37 100644
--- a/src/net/java/sip/communicator/plugin/jabberaccregwizz/JabberServerChooserDialog.java
+++ b/src/net/java/sip/communicator/plugin/jabberaccregwizz/JabberServerChooserDialog.java
@@ -23,6 +23,7 @@ import net.java.sip.communicator.plugin.desktoputil.*;
 import net.java.sip.communicator.util.*;
 
 import org.jitsi.service.fileaccess.*;
+import org.jitsi.util.xml.*;
 import org.osgi.framework.*;
 import org.w3c.dom.*;
 import org.xml.sax.*;
@@ -239,8 +240,9 @@ public class JabberServerChooserDialog
             }
 
             FileInputStream fis = new FileInputStream(localServersListFile);
-            DocumentBuilderFactory factory = DocumentBuilderFactory
-                .newInstance();
+            DocumentBuilderFactory factory
+                = DocumentBuilderFactory.newInstance();
+            XMLUtils.disableExternalEntities(factory);
             DocumentBuilder constructor = factory.newDocumentBuilder();
             Document document = constructor.parse(fis);
             Element root = document.getDocumentElement();
@@ -314,6 +316,7 @@ public class JabberServerChooserDialog
                 // Create a builder factory
                 DocumentBuilderFactory factory
                     = DocumentBuilderFactory.newInstance();
+                XMLUtils.disableExternalEntities(factory);
 
                 // Create the builder and parse the file
                 serverComments = factory.newDocumentBuilder()