svg import: do not load dtd (from internet when xml is parsed)

This commit is contained in:
honfika@gmail.com
2015-12-23 22:23:52 +01:00
parent 112800f7ee
commit 5255d9e80e

View File

@@ -173,6 +173,7 @@ public class ShapeImporter {
try {
DocumentBuilderFactory docFactory = DocumentBuilderFactory.newInstance();
docFactory.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);
DocumentBuilder docBuilder = docFactory.newDocumentBuilder();
Document doc = docBuilder.parse(new InputSource(new StringReader(svgXml)));
Element rootElement = doc.getDocumentElement();