https://bz.apache.org/bugzilla/show_bug.cgi?id=64541
--- Comment #6 from Christopher Schultz <ch...@christopherschultz.net> --- I was able to work around this by adding the following line of code to MbeansDescriptorsDigesterSource.createDigester() method: digester.getParser().setProperty("http://www.oracle.com/xml/jaxp/properties/entityExpansionLimit", 20); This actually subverts your security settings, however. I'm still curious as to why the SAX parser is warning of deep entity replacements, here, when I only see a single level. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org