@Nullable private JAXBTYPE _readSecurelyFromInputSource(@Nonnull final InputSource aInputSource) { // Initialize settings with defaults final SAXReaderSettings aSettings = new SAXReaderSettings(); if (m_bReadSecure) { // Apply settings that make reading more secure aSettings.setFeatureValues(EXMLParserFeature.AVOID_XML_ATTACKS); } // Create new XML reader final org.xml.sax.XMLReader aParser = SAXReaderFactory.createXMLReader(); // Apply settings aSettings.applyToSAXReader(aParser); return read(new SAXSource(aParser, aInputSource)); }