Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 336781 - If xml parser is not validating, turn of external dtd resolution
Summary: If xml parser is not validating, turn of external dtd resolution
Status: RESOLVED FIXED
Alias: None
Product: Jetty
Classification: RT
Component: server (show other bugs)
Version: 7.2.2   Edit
Hardware: All All
: P3 normal (vote)
Target Milestone: 7.3.x   Edit
Assignee: Jan Bartel CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-02-10 01:44 EST by Jan Bartel CLA
Modified: 2011-02-10 02:50 EST (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jan Bartel CLA 2011-02-10 01:44:40 EST 
As a precaution, use http://apache.org/xml/features/nonvalidating/load-external-dtd with the xml parser to ensure that even if not validating, we don't try and load the xsds and dtds from an external source.
Comment 1 Jan Bartel CLA 2011-02-10 02:50:12 EST 
Fixed in rev  2770.