Merge pull request #421 in CORE/base-third from ~ZHOUPING/base-third:release/10.0 to release/10.0

* commit '3f2a0354419260518fac13e1e99318b88d47db3e':
  REPORT-29490 安全漏洞by zack

fine-third-default/fine-sjsxp/src/main/java/com/fr/third/javax/xml/stream/XMLEntityManager.java

@@ -443,7 +443,7 @@ public class XMLEntityManager implements XMLComponent, XMLEntityResolver {
     } // setEntityHandler(XMLEntityHandler)
     
     //this function returns StaxXMLInputSource
-    public StaxXMLInputSource resolveEntityAsPerStax(XMLResourceIdentifier resourceIdentifier) throws java.io.IOException{
+    public StaxXMLInputSource resolveEntityAsPerStax(XMLResourceIdentifier resourceIdentifier) throws IOException{
         
         if(resourceIdentifier == null ) return null;
         
@@ -976,8 +976,8 @@ public class XMLEntityManager implements XMLComponent, XMLEntityResolver {
         fEntityStack.removeAllElements();
         fCurrentEntity = null;
         fValidation = false;
-        fExternalGeneralEntities = true;
-        fExternalParameterEntities = true;
+        fExternalGeneralEntities = false;
+        fExternalParameterEntities = false;
         fAllowJavaEncodings = true ;
         
         //test();