Java SAXReaderSettings.applyToSAXReader Examples

Example #1

File: AbstractJAXBMarshaller.java Project: phlocbg/phloc-commons

  @Nullable
  private JAXBTYPE _readSecurelyFromInputSource(@Nonnull final InputSource aInputSource) {
    // Initialize settings with defaults
    final SAXReaderSettings aSettings = new SAXReaderSettings();
    if (m_bReadSecure) {
      // Apply settings that make reading more secure
      aSettings.setFeatureValues(EXMLParserFeature.AVOID_XML_ATTACKS);
    }

    // Create new XML reader
    final org.xml.sax.XMLReader aParser = SAXReaderFactory.createXMLReader();

    // Apply settings
    aSettings.applyToSAXReader(aParser);

    return read(new SAXSource(aParser, aInputSource));
  }