[activemq] branch activemq-5.15.x updated: Set the secure processing feature on the TransformerFactory

[jbonofre]

This is an automated email from the ASF dual-hosted git repository.

jbonofre pushed a commit to branch activemq-5.15.x
in repository https://gitbox.apache.org/repos/asf/activemq.git


The following commit(s) were added to refs/heads/activemq-5.15.x by this push:
     new a739e29  Set the secure processing feature on the TransformerFactory
a739e29 is described below

commit a739e292fc7a3daeb8dd20c8c2a2c3f1584f5936
Author: Colm O hEigeartaigh <cohei...@apache.org>
AuthorDate: Wed Nov 28 18:10:32 2018 +0000

    Set the secure processing feature on the TransformerFactory
---
 .../main/java/org/apache/activemq/console/command/CreateCommand.java    | 2 ++
 1 file changed, 2 insertions(+)

diff --git 
a/activemq-console/src/main/java/org/apache/activemq/console/command/CreateCommand.java
 
b/activemq-console/src/main/java/org/apache/activemq/console/command/CreateCommand.java
index 28080e6..2483527 100644
--- 
a/activemq-console/src/main/java/org/apache/activemq/console/command/CreateCommand.java
+++ 
b/activemq-console/src/main/java/org/apache/activemq/console/command/CreateCommand.java
@@ -205,6 +205,8 @@ public class CreateCommand extends AbstractCommand {
     // utlity method to write an xml source to file
     private void writeToFile(Source src, File file) throws 
TransformerException {
         TransformerFactory tFactory = TransformerFactory.newInstance();
+        tFactory.setFeature(javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING, 
Boolean.TRUE);
+
         Transformer fileTransformer = tFactory.newTransformer();
 
         Result res = new StreamResult(file);