Greg Janée created FOP-3086:
-------------------------------

             Summary: allow override of 
http://apache.org/xml/features/disallow-doctype-decl
                 Key: FOP-3086
                 URL: https://issues.apache.org/jira/browse/FOP-3086
             Project: FOP
          Issue Type: Improvement
    Affects Versions: 2.7
            Reporter: Greg Janée


In org.apache.fop.cli.InputHandler.getXMLReader, there is a call that is 
hard-coded to set SAX feature 
[http://apache.org/xml/features/disallow-doctype-decl] to true.  This breaks 
existing implementations (such as mine) that process libraries of templates 
that contain DOCTYPE declarations.  While I'm sure there was a reason for this 
change (security against rogue DOCTYPE contents I'm guessing), the risk doesn't 
apply for implementations that are processing internally-maintained templates 
and that are not processing templates coming in from the wild.  The request is 
to make this setting overrideable to false by some kind of FOP configuration 
parameter or environment variable.  As it is, this completely breaks FOP for my 
installation, and the only way I've been able to continue to run is to 
monkey-patch the JAR file.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to