danfickle / danfickle/openhtmltopdf

Error is logged when the TransformerFactory implementation does not allow setting attributes

Open
#802 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
2.2k
Forks
423
PR merge metrics
No merged PRs in 30d

Description

In the setTranformerFactorySecurityFeatures method of XMLResource.java, the implementation of TransformerFactory may not accept modifications to certain attributes using the setAttribute method (e.g. in org.apache.xalan.processor.TransformerFactoryImpl). The XMLResource should first check to see if getFeature() returns the appropriate value (i.e. it may default to false), in which case it can skip attempting to set them and avoid erroneously logging a SEVERE message implying that XML External Entities are enabled.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.