uima-ducc-cli/src/main/java/org/apache/uima/ducc/cli/DuccUiUtilities.java [151:169]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	private static void secureDocumentBuilderFactory(DocumentBuilderFactory documentBuilderFactory) {
	    try {
	        documentBuilderFactory.setFeature(DISALLOW_DOCTYPE_DECL, true);
	      } catch (ParserConfigurationException e1) {
	        UIMAFramework.getLogger().log(Level.WARNING, 
	            "DocumentBuilderFactory didn't recognize setting feature " + DISALLOW_DOCTYPE_DECL);
	      }
	      
	      try {
	        documentBuilderFactory.setFeature(LOAD_EXTERNAL_DTD, false);
	      } catch (ParserConfigurationException e) {
	        UIMAFramework.getLogger().log(Level.WARNING, 
	            "DocumentBuilderFactory doesn't support feature " + LOAD_EXTERNAL_DTD);
	      }
	      
	      documentBuilderFactory.setXIncludeAware(false);
	      documentBuilderFactory.setExpandEntityReferences(false);

	}
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



uima-ducc-pullservice/src/main/java/org/apache/uima/ducc/ps/service/dgen/DeployableGenerator.java [124:141]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  private void secureDocumentBuilderFactory(DocumentBuilderFactory documentBuilderFactory) {
    try {
      documentBuilderFactory.setFeature(DISALLOW_DOCTYPE_DECL, true);
    } catch (ParserConfigurationException e1) {
      UIMAFramework.getLogger().log(Level.WARNING,
              "DocumentBuilderFactory didn't recognize setting feature " + DISALLOW_DOCTYPE_DECL);
    }

    try {
      documentBuilderFactory.setFeature(LOAD_EXTERNAL_DTD, false);
    } catch (ParserConfigurationException e) {
      UIMAFramework.getLogger().log(Level.WARNING,
              "DocumentBuilderFactory doesn't support feature " + LOAD_EXTERNAL_DTD);
    }

    documentBuilderFactory.setXIncludeAware(false);
    documentBuilderFactory.setExpandEntityReferences(false);
  }
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



uima-ducc-user/src/main/java/org/apache/uima/ducc/user/dgen/DeployableGenerator.java [124:141]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	private void secureDocumentBuilderFactory(DocumentBuilderFactory documentBuilderFactory) {
		try {
			documentBuilderFactory.setFeature(DISALLOW_DOCTYPE_DECL, true);
		} catch (ParserConfigurationException e1) {
			UIMAFramework.getLogger().log(Level.WARNING, 
					"DocumentBuilderFactory didn't recognize setting feature " + DISALLOW_DOCTYPE_DECL);
		}

		try {
			documentBuilderFactory.setFeature(LOAD_EXTERNAL_DTD, false);
		} catch (ParserConfigurationException e) {
			UIMAFramework.getLogger().log(Level.WARNING, 
					"DocumentBuilderFactory doesn't support feature " + LOAD_EXTERNAL_DTD);
		}

		documentBuilderFactory.setXIncludeAware(false);
		documentBuilderFactory.setExpandEntityReferences(false);
	}
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -