Changeset 10702 in josm for trunk/src/org

Timestamp:

2016-08-02T12:56:49+02:00 (8 years ago)

Author:

Don-vip

Message:

fix #13260 - Disable DTD resolution when loading .osm files

File:

• trunk/src/org/openstreetmap/josm/io/OsmReader.java (modified) (1 diff)

trunk/src/org/openstreetmap/josm/io/OsmReader.java

@@ -585 +585 @@
 
             try (InputStreamReader ir = UTFInputStreamReader.create(source)) {
-                XMLStreamReader parser = XMLInputFactory.newInstance().createXMLStreamReader(ir);
-                setParser(parser);
+                XMLInputFactory factory = XMLInputFactory.newInstance();
+                // do not try to load external entities
+                factory.setProperty(XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIES, Boolean.FALSE);
+                factory.setProperty(XMLInputFactory.SUPPORT_DTD, Boolean.FALSE);
+                setParser(factory.createXMLStreamReader(ir));
                 parse();
             }