Hi all,

I'm trying to process XML response from a POX service which return XML
response with DOCTYPE declarations and it fails with
"javax.xml.stream.XMLStreamException: DOCTYPE is not allowed exception".
Reason for this is DisallowDoctypeDeclStreamReaderWrapper throws a
XMLStreamException when DTD element found. I think this is done to fix
security vlunarability CVE-2010-1632.

AFIK setting javax.xml.stream.supportDTD property to false in axiom will
prevent DTD processing and does not require to throw a exception when DTD
found.

-- 
Thanks,
Miyuru Wanninayaka
Software Engineer - WSO2 Inc <http://wso2.com/>.

Reply via email to