Disallow all doctypes. There seems to be no combinations of settings that allow...
authorlajoie <lajoie@ab3bd59b-922f-494d-bb5f-6f0a3c29deca>
Fri, 11 Jan 2008 07:21:23 +0000 (07:21 +0000)
committerlajoie <lajoie@ab3bd59b-922f-494d-bb5f-6f0a3c29deca>
Fri, 11 Jan 2008 07:21:23 +0000 (07:21 +0000)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2556 ab3bd59b-922f-494d-bb5f-6f0a3c29deca

resources/conf/internal.xml

index b6fe23e..3154178 100644 (file)
             <map>
                 <entry>
                     <key>
-                        <value>http://xml.org/sax/features/external-general-entities</value>
+                        <value>http://apache.org/xml/features/disallow-doctype-decl</value>
                     </key>
-                    <util:constant static-field="java.lang.Boolean.FALSE"/>
-                </entry>
-                <entry>
-                    <key>
-                        <value>http://xml.org/sax/features/external-parameter-entities</value>
-                    </key>
-                    <util:constant static-field="java.lang.Boolean.FALSE"/>
+                    <util:constant static-field="java.lang.Boolean.TRUE"/>
                 </entry>
             </map>
         </property>