This is an automated email from the ASF dual-hosted git repository. rmaucher pushed a commit to branch 11.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 655ef8e8f086944a6b065fa0e99620b26cacbea6 Author: opencode <[email protected]> AuthorDate: Tue Sep 29 19:16:34 2026 +0200 Match the runtime default by blocking external entity resolution in the Validator Ant task --- java/org/apache/catalina/ant/ValidatorTask.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/org/apache/catalina/ant/ValidatorTask.java b/java/org/apache/catalina/ant/ValidatorTask.java index 201d931119..4ee955f43c 100644 --- a/java/org/apache/catalina/ant/ValidatorTask.java +++ b/java/org/apache/catalina/ant/ValidatorTask.java @@ -97,7 +97,7 @@ public class ValidatorTask extends BaseRedirectorHelperTask { ClassLoader oldCL = currentThread.getContextClassLoader(); currentThread.setContextClassLoader(ValidatorTask.class.getClassLoader()); - Digester digester = DigesterFactory.newDigester(true, true, null, false); + Digester digester = DigesterFactory.newDigester(true, true, null, true); try (InputStream stream = new BufferedInputStream(new FileInputStream(file.getCanonicalFile()))) { InputSource is = new InputSource(file.toURI().toURL().toExternalForm()); is.setByteStream(stream); --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
