Comments (3)
mwilliamson
commented on August 28, 2024
It appears that the implementation of the SAX parser doesn't support disabling DTDs, which prevents XML entity attacks. If possible, I'd suggest switching to a SAX parser that supports the feature.
from java-mammoth.
foobnix
commented on August 28, 2024
I am using implementation 'javax.xml.stream:stax-api:1.0-2' and it's works fine with the old version of your library
I have try implementation 'xerces:xercesImpl:2.12.2' - it's not helped.
Could you please suggest a sax parser that supports this feature?
or
Can you configure the library not to crash if the parser does not support this feature?
from java-mammoth.
mwilliamson
commented on August 28, 2024
Could you please suggest a sax parser that supports this feature?
Xerces should support the feature: https://xerces.apache.org/xerces2-j/features.html
Can you configure the library not to crash if the parser does not support this feature?
The feature avoids a security vulnerability, so I would be reluctant to ignore errors from enabling the feature.
from java-mammoth.
Related Issues (20)
- Getting compile time error in HTML.java HOT 5
- Alignment and list alingment HOT 1
- Width and height of images HOT 1
- Cross-references are not converted in anchors
- Error when multiple numbering levels reference the same paragraph style HOT 4
- Maintain spacing B/W Two Paragraph. HOT 3
- Add fontsize during conversion from docx to html HOT 1
- Image converter add attribute id or class HOT 1
- Missing Tab when use docxToHtml to convert docx HOT 6
- i try to use convertToHtml( docx file) method happens : error in opening zip file; HOT 1
- The numbering of the ordered list is reset when some text is found between list items.
- Two different ordered lists are merged in the conversion result
- Get list of pages instead of one html string HOT 1
- Large file oom problem HOT 2
- The font display in Webview is too small, how can I change to a larger size? HOT 1
- Template might not exists or might nor be accessible by ano of the configured template resolvers HOT 1
- Charset not set to UTF-8 throughout the project HOT 3
- Docx revision history? HOT 1
- Different types of ordered and unordered lists are not supported HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from java-mammoth.