[
https://issues.apache.org/jira/browse/OPENNLP-1835?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Martin Wiesner updated OPENNLP-1835:
------------------------------------
Fix Version/s: 1.9.5
> Tolerate unsupported XML parser security options
> ------------------------------------------------
>
> Key: OPENNLP-1835
> URL: https://issues.apache.org/jira/browse/OPENNLP-1835
> Project: OpenNLP
> Issue Type: Improvement
> Affects Versions: 2.5.9, 3.0.0-M3
> Reporter: Richard Zowalla
> Assignee: Martin Wiesner
> Priority: Minor
> Fix For: 1.9.5, 2.5.10, 3.0.0-M4
>
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> OpenNLP 2.5.9 added stricter XML parser hardening in XmlUtil, including JAXP
> external-access properties, implementation-specific parser features, and
> XInclude configuration.
> Some XML parser providers, including Android's, reject these optional
> settings even though they can still create a usable secure parser. This
> caused XmlUtil.createDocumentBuilder() to fail during OpenNLP model
> initialization on Android.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
