Add xerces security manager to pool parsers - fixed SIDP-74

git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2493 ab3bd59b-922f-494d-bb5f-6f0a3c29deca

diff --git a/resources/conf/internal.xml b/resources/conf/internal.xml
index c5ffeeb..64f65da 100644 (file)
--- a/resources/conf/internal.xml
+++ b/resources/conf/internal.xml
@@ -57,6 +57,16 @@
         <property name="ignoreComments" value="true" />
         <property name="ignoreElementContentWhitespace" value="true" />
         <property name="namespaceAware" value="true" />
+        <property name="builderAttributes">
+            <util:map>
+                <entry>
+                    <key>
+                        <value>http://apache.org/xml/properties/security-manager</value>
+                    </key>
+                    <bean id="shibboleth.XercesSecurityManager" class="org.apache.xerces.util.SecurityManager" />
+                </entry>
+            </util:map>
+        </property>
     </bean>
 
     <bean id="shibboleth.StorageService" class="org.opensaml.util.storage.MapBasedStorageService" depends-on="shibboleth.LogbackLogging" />