Samin061 commented on PR #5100:
URL: https://github.com/apache/calcite/pull/5100#issuecomment-4977613583

   You're right, that's the same fix. #5006 predates this one and already has 
CALCITE-7601, and both patches land the same way (hardened SAXParser with 
disallow-doctype-decl feeding JTS's GMLHandler, plus a DOCTYPE-rejection 
regression test), so there's no difference on the security side. Happy to defer 
to whichever you'd rather keep. I'll leave this open for now so you can decide.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to