[
https://issues.apache.org/jira/browse/OPENNLP-1835?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Richard Zowalla updated OPENNLP-1835:
-------------------------------------
Affects Version/s: 3.0.0-M3
2.5.9
> Tolerate unsupported XML parser security options
> ------------------------------------------------
>
> Key: OPENNLP-1835
> URL: https://issues.apache.org/jira/browse/OPENNLP-1835
> Project: OpenNLP
> Issue Type: Improvement
> Affects Versions: 2.5.9, 3.0.0-M3
> Reporter: Richard Zowalla
> Priority: Major
> Fix For: 2.5.10, 3.0.0
>
>
> OpenNLP 2.5.9 added stricter XML parser hardening in XmlUtil, including JAXP
> external-access properties, implementation-specific parser features, and
> XInclude configuration.
> Some XML parser providers, including Android's, reject these optional
> settings even though they can still create a usable secure parser. This
> caused XmlUtil.createDocumentBuilder() to fail during OpenNLP model
> initialization on Android.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
