Author: coheigea
Date: Mon Jun 17 11:37:34 2019
New Revision: 1861501
URL: http://svn.apache.org/viewvc?rev=1861501&view=rev
Log:
Disabling doctypes in EncryptionUtils
Modified:
webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java
Modified:
webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java
URL:
http://svn.apache.org/viewvc/webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java?rev=1861501&r1=1861500&r2=1861501&view=diff
==============================================================================
---
webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java
(original)
+++
webservices/wss4j/trunk/ws-security-dom/src/main/java/org/apache/wss4j/dom/util/EncryptionUtils.java
Mon Jun 17 11:37:34 2019
@@ -393,12 +393,12 @@ public final class EncryptionUtils {
Document document = null;
try {
- document = org.apache.xml.security.utils.XMLUtils.read(new
ByteArrayInputStream(bytes), false);
+ document = org.apache.xml.security.utils.XMLUtils.read(new
ByteArrayInputStream(bytes));
} catch (SAXException ex) {
// A prefix may not have been bound, try to fix the DOM Element in
this case.
String fixedElementStr = setParentPrefixes(encData, new
String(bytes));
document = org.apache.xml.security.utils.XMLUtils.read(
- new ByteArrayInputStream(fixedElementStr.getBytes()), false);
+ new ByteArrayInputStream(fixedElementStr.getBytes()));
}
Node decryptedNode =