Base: Disable XML external entity expansion

Addresses https://github.com/FreeCAD/FreeCAD/security/code-scanning/29
This commit is contained in:
Chris Hennes
2025-06-08 18:48:11 -05:00
committed by Kacper Donat
parent f03900b58d
commit 9714e2f87a

View File

@@ -1872,6 +1872,7 @@ int ParameterManager::LoadDocument(const XERCES_CPP_NAMESPACE_QUALIFIER InputSou
parser->setDoSchema(gDoSchema);
parser->setValidationSchemaFullChecking(gSchemaFullChecking);
parser->setCreateEntityReferenceNodes(gDoCreate);
parser->setDisableDefaultEntityResolution(true);
auto errReporter = new DOMTreeErrorReporter();
parser->setErrorHandler(errReporter);