This is an automated email from the ASF dual-hosted git repository.
rmaucher pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 2a7e82c652 Revert commit, with an explanation
2a7e82c652 is described below
commit 2a7e82c652966f8ce0687cbae2817dc5a48cfca2
Author: remm <[email protected]>
AuthorDate: Tue Sep 29 21:04:05 2026 +0200
Revert commit, with an explanation
---
java/org/apache/catalina/ant/ValidatorTask.java | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/java/org/apache/catalina/ant/ValidatorTask.java
b/java/org/apache/catalina/ant/ValidatorTask.java
index 4ee955f43c..36c76dc66b 100644
--- a/java/org/apache/catalina/ant/ValidatorTask.java
+++ b/java/org/apache/catalina/ant/ValidatorTask.java
@@ -97,7 +97,8 @@ public class ValidatorTask extends BaseRedirectorHelperTask {
ClassLoader oldCL = currentThread.getContextClassLoader();
currentThread.setContextClassLoader(ValidatorTask.class.getClassLoader());
- Digester digester = DigesterFactory.newDigester(true, true, null,
true);
+ // External entities are not blocked since they are always fully
trusted
+ Digester digester = DigesterFactory.newDigester(true, true, null,
false);
try (InputStream stream = new BufferedInputStream(new
FileInputStream(file.getCanonicalFile()))) {
InputSource is = new
InputSource(file.toURI().toURL().toExternalForm());
is.setByteStream(stream);
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
