Package org.wildfly.common.xml
Class XMLInputFactoryUtil
- java.lang.Object
-
- org.wildfly.common.xml.XMLInputFactoryUtil
-
public final class XMLInputFactoryUtil extends java.lang.ObjectFactory providesXMLInputFactorywith secure defaults set. Properties not supported generate a warning, but the factory process creation will continue and return a result. Settings based on recommendations of Sonarcloud RSPEC-2755 and OWASP XML External Entity Prevention Cheatsheet.XMLInputFactory.SUPPORT_DTDis set to false.XMLInputFactory.IS_SUPPORTING_EXTERNAL_ENTITIESis set to false.
- Since:
- 1.6.0.Final
- Author:
- Boris Unckel
-
-
Method Summary
All Methods Static Methods Concrete Methods Modifier and Type Method Description static javax.xml.stream.XMLInputFactorycreate()Factory generated with secure defaults.
-
-
-
Method Detail
-
create
@NotNull public static javax.xml.stream.XMLInputFactory create()
Factory generated with secure defaults.- Returns:
- an instance of the XMLInputFactory.
-
-