Richard Zowalla created OPENNLP-1835:
----------------------------------------

             Summary: Tolerate unsupported XML parser security options
                 Key: OPENNLP-1835
                 URL: https://issues.apache.org/jira/browse/OPENNLP-1835
             Project: OpenNLP
          Issue Type: Improvement
            Reporter: Richard Zowalla
             Fix For: 2.5.10, 3.0.0


OpenNLP 2.5.9 added stricter XML parser hardening in XmlUtil, including JAXP 
external-access properties, implementation-specific parser features, and 
XInclude configuration.

Some XML parser providers, including Android's, reject these optional settings 
even though they can still create a usable secure parser. This caused 
XmlUtil.createDocumentBuilder() to fail during OpenNLP model initialization on 
Android.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to