1 package com.sun.syndication.io; 2 3 import org.jdom.JDOMException; 4 import org.xml.sax.XMLReader; 5 6 /* 7 * This code is needed to fix the security problem outlined in http://www.securityfocus.com/archive/1/297714 8 * 9 * Unfortunately there isn't an easy way to check if an XML parser supports a particular feature, so 10 * we need to set it and catch the exception if it fails. We also need to subclass the JDom SAXBuilder 11 * class in order to get access to the underlying SAX parser - otherwise the features don't get set until 12 * we are already building the document, by which time it's too late to fix the problem. 13 * 14 * Crimson is one parser which is known not to support these features. 15 * 16 */ 17 public class SAXBuilder extends org.jdom.input.SAXBuilder { 18 19 public SAXBuilder(boolean _validate) { 20 super(_validate); 21 } 22 23 public XMLReader createParser() throws JDOMException { 24 return super.createParser(); 25 } 26 27 }