in src/main/java/org/apache/sling/junit/impl/servlet/XmlRenderer.java [299:316]
public static String getStringFromElement(Element element) {
try {
TransformerFactory tf = TransformerFactory.newInstance();
tf.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
tf.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
tf.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "");
Transformer trans = tf.newTransformer();
StringWriter sw = new StringWriter();
trans.transform(new DOMSource(element), new StreamResult(sw));
String elementString = sw.toString();
return elementString;
} catch (TransformerConfigurationException e) {
System.err.println(getException(e));
} catch (TransformerException e) {
System.err.println(getException(e));
}
return "";
}