XXE Vulnerability
Prevent XXE attacks in xml processing.
@@ -150,6 +150,7 @@ private String readIdFromInstallRdf(File root) {
DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
factory.setNamespaceAware(true);
+ factory.setExpandEntityReferences(false);
DocumentBuilder builder = factory.newDocumentBuilder();
Document doc = builder.parse(installRdf);
