Browse Source

Merge pull request #421 in CORE/base-third from ~ZHOUPING/base-third:release/10.0 to release/10.0

* commit '3f2a0354419260518fac13e1e99318b88d47db3e':
  REPORT-29490 安全漏洞by zack
release/10.0
zhouping 5 years ago
parent
commit
31d59dc77f
  1. 6
      fine-third-default/fine-sjsxp/src/main/java/com/fr/third/javax/xml/stream/XMLEntityManager.java

6
fine-third-default/fine-sjsxp/src/main/java/com/fr/third/javax/xml/stream/XMLEntityManager.java

@ -443,7 +443,7 @@ public class XMLEntityManager implements XMLComponent, XMLEntityResolver {
} // setEntityHandler(XMLEntityHandler) } // setEntityHandler(XMLEntityHandler)
//this function returns StaxXMLInputSource //this function returns StaxXMLInputSource
public StaxXMLInputSource resolveEntityAsPerStax(XMLResourceIdentifier resourceIdentifier) throws java.io.IOException{ public StaxXMLInputSource resolveEntityAsPerStax(XMLResourceIdentifier resourceIdentifier) throws IOException{
if(resourceIdentifier == null ) return null; if(resourceIdentifier == null ) return null;
@ -976,8 +976,8 @@ public class XMLEntityManager implements XMLComponent, XMLEntityResolver {
fEntityStack.removeAllElements(); fEntityStack.removeAllElements();
fCurrentEntity = null; fCurrentEntity = null;
fValidation = false; fValidation = false;
fExternalGeneralEntities = true; fExternalGeneralEntities = false;
fExternalParameterEntities = true; fExternalParameterEntities = false;
fAllowJavaEncodings = true ; fAllowJavaEncodings = true ;
//test(); //test();

Loading…
Cancel
Save