security - 变压器配置异常 : Cannot set the feature for Transformer

标签 security java-8 saxparser xalan javax

我在设置 TransformerFactory 功能时遇到以下错误。

javax.xml.transform.TransformerConfigurationException: Cannot set the feature 'http://apache.org/xml/features/disallow-doctype-decl' on this TransformerFactory.
        at org.apache.xalan.processor.TransformerFactoryImpl.setFeature(TransformerFactoryImpl.java:416)

代码片段是::

public static TransformerFactory mytFactory;

mytFactory = TransformerFactory.newInstance();
mytFactory.setFeature(“http://apache.org/xml/features/disallow-doctype-decl“, true);

请帮我解决这个问题。

最佳答案

我也未能调用 TransformerFactoryImpl 的方法“setFeature”。我找到了使用 XMLReader 设置功能的其他方法,如下所示:

XMLReader reader = XMLReaderFactory.createXMLReader();
reader.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);

Source xmlSource = new SAXSource(reader, new InputSource(new FileInputStream(xmlFile)));
Transformer transformer = TransformerFactory.newInstance().newTransformer();
StreamResult result = new StreamResult(new StringWriter());
transformer.transform(xmlSource, result);

设置之后,如果输入中有 DOCTYPE 标签,我们将出现以下异常:

javax.xml.transform.TransformerException: org.xml.sax.SAXParseException; lineNumber: 2; columnNumber: 10; DOCTYPE is disallowed when the feature "http://apache.org/xml/features/disallow-doctype-decl" set to true.
    at com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl.transform(TransformerImpl.java:749)
    at com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl.transform(TransformerImpl.java:351)
    at ch.ofwi.pa.webservice.provideraccounting.impl.handler.SchemaValidationHandler.main(SchemaValidationHandler.java:227)
Caused by: org.xml.sax.SAXParseException; lineNumber: 2; columnNumber: 10; DOCTYPE is disallowed when the feature "http://apache.org/xml/features/disallow-doctype-decl" set to true.
    at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1239)
    at com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl.transformIdentity(TransformerImpl.java:668)
    at com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl.transform(TransformerImpl.java:737)

希望对您有帮助。

关于security - 变压器配置异常 : Cannot set the feature for Transformer,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/50234862/

相关文章:

java - Android XML 解析器显示重复数据

java - SAX 解析器出现问题

django - gnuplot Web界面的安全风险

security - Websocket 安全

ios - XMPPFramework - 安全选项

Java 8 Stream filter map in map -- Map<String,Map<String,Employee>>

ruby - 替代 eval()

从 spring-hadoop 调用的 Java 8 无法识别 Javascript 引擎 (Nashorn)

java - lambda 表达式中的错误返回类型

java - 使用 SAX 解析 XML 文件时如何保留注释和 XML 声明?