[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/conf/global-system.xml

noreply at shibboleth.net noreply at shibboleth.net
Wed Sep 3 03:34:19 EDT 2014


Author: scantor
Date: Wed Sep  3 03:34:18 2014
New Revision: 6498

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6498&view=rev
Log:
Add secure processing feature to parser since we're overriding library defaults.

Modified:
    trunk/idp-conf/src/main/resources/system/conf/global-system.xml

Modified: trunk/idp-conf/src/main/resources/system/conf/global-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/global-system.xml?rev=6498&r1=6497&r2=6498&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/global-system.xml (original)
+++ trunk/idp-conf/src/main/resources/system/conf/global-system.xml Wed Sep  3 03:34:18 2014
@@ -87,10 +87,7 @@
             p:namespaceAware="true">
         <property name="builderAttributes">
             <map>
-                <entry>
-                    <key>
-                        <value>http://apache.org/xml/properties/security-manager</value>
-                    </key>
+                <entry key="http://apache.org/xml/properties/security-manager">
                     <bean id="shibboleth.XercesSecurityManager"
                         class="%{idp.xml.securityManager:com.sun.org.apache.xerces.internal.util.SecurityManager}" />
                 </entry>
@@ -98,17 +95,14 @@
         </property>
         <property name="builderFeatures">
             <map>
-                <entry>
-                    <key>
-                        <value>http://apache.org/xml/features/disallow-doctype-decl</value>
-                    </key>
-                    <util:constant static-field="java.lang.Boolean.TRUE"/>
+                <entry key="http://apache.org/xml/features/disallow-doctype-decl">
+                    <util:constant static-field="java.lang.Boolean.TRUE" />
                 </entry>
-                <entry>
-                    <key>
-                        <value>http://apache.org/xml/features/validation/schema/normalized-value</value>
-                    </key>
-                    <util:constant static-field="java.lang.Boolean.FALSE"/>
+                <entry key="http://apache.org/xml/features/validation/schema/normalized-value">
+                    <util:constant static-field="java.lang.Boolean.FALSE" />
+                </entry>
+                <entry key="http://javax.xml.XMLConstants/feature/secure-processing">
+                    <util:constant static-field="java.lang.Boolean.TRUE" />
                 </entry>
             </map>
         </property>



More information about the commits mailing list