From 5255d9e80e9629336a6dc10eb950e873274908e2 Mon Sep 17 00:00:00 2001 From: "honfika@gmail.com" Date: Wed, 23 Dec 2015 22:23:52 +0100 Subject: [PATCH] svg import: do not load dtd (from internet when xml is parsed) --- .../src/com/jpexs/decompiler/flash/importers/ShapeImporter.java | 1 + 1 file changed, 1 insertion(+) diff --git a/libsrc/ffdec_lib/src/com/jpexs/decompiler/flash/importers/ShapeImporter.java b/libsrc/ffdec_lib/src/com/jpexs/decompiler/flash/importers/ShapeImporter.java index 757ed0399..3597da7b8 100644 --- a/libsrc/ffdec_lib/src/com/jpexs/decompiler/flash/importers/ShapeImporter.java +++ b/libsrc/ffdec_lib/src/com/jpexs/decompiler/flash/importers/ShapeImporter.java @@ -173,6 +173,7 @@ public class ShapeImporter { try { DocumentBuilderFactory docFactory = DocumentBuilderFactory.newInstance(); + docFactory.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false); DocumentBuilder docBuilder = docFactory.newDocumentBuilder(); Document doc = docBuilder.parse(new InputSource(new StringReader(svgXml))); Element rootElement = doc.getDocumentElement();