Disallow all doctypes. There seems to be no combinations of settings that allow...

git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2556 ab3bd59b-922f-494d-bb5f-6f0a3c29deca

diff --git a/resources/conf/internal.xml b/resources/conf/internal.xml
index b6fe23e..3154178 100644 (file)
--- a/resources/conf/internal.xml
+++ b/resources/conf/internal.xml
@@ -73,15 +73,9 @@
             <map>
                 <entry>
                     <key>
-                        <value>http://xml.org/sax/features/external-general-entities</value>
+                        <value>http://apache.org/xml/features/disallow-doctype-decl</value>
                     </key>
-                    <util:constant static-field="java.lang.Boolean.FALSE"/>
-                </entry>
-                <entry>
-                    <key>
-                        <value>http://xml.org/sax/features/external-parameter-entities</value>
-                    </key>
-                    <util:constant static-field="java.lang.Boolean.FALSE"/>
+                    <util:constant static-field="java.lang.Boolean.TRUE"/>
                 </entry>
             </map>
         </property>