Hi, I updated my GeoServer (Tomcat 9/Windows Server) from 2.24.2 to 2.25.0 and now I can't preview WMS layers. The error message is: "java.lang.reflect.UndeclaredThrowableExceptionorg.xml.sax.SAXException: Entity resolution disallowed for null". The same message is shown when I try to validate an SLD stylesheet. I copied the full stack trace to a file and attached it to this message. I also reverted back to the data dir included in the 2.25.0 release and can reproduce the error f.e. with the 'point' style.
I now found out that when I'm starting GeoServer with the -DENTITY_RESOLUTION_ALLOWLIST=* parameter, the error is gone. Although this parameter shouldn't be necessary because the styles are only containing references to www.opengis.net<http://www.opengis.net> and www.w3.org<http://www.w3.org> which are in the default list of allowed domains for entity expansion according to the documentation<https://docs.geoserver.org/latest/en/user/production/config.html#production-config-external-entities>. The geoserver log shows a lot of "WARN [geotools.xsd] - Sax parser property 'http://www.oracle.com/xml/jaxp/properties/entityExpansionLimit' not recognized. Xerces version is incompatible." messages. Might there be a connection to the above issue? Am I doing something wrong? Thank you and best regards Daniel
SAXException.log
Description: SAXException.log
_______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
