Package org.wildfly.common.xml

Class TransformerFactoryUtil

java.lang.Object

org.wildfly.common.xml.TransformerFactoryUtil

public final class TransformerFactoryUtil
extends Object

Factory provides TransformerFactory with secure defaults set. Properties not supported generate a warning, but the factory process creation will continue and return a result. Settings based on recommendations of Sonarcloud RSPEC-2755 and OWASP XML External Entity Prevention Cheatsheet.

• XMLConstants.FEATURE_SECURE_PROCESSING is set to true.
• XMLConstants.ACCESS_EXTERNAL_DTD is set to empty.
• XMLConstants.ACCESS_EXTERNAL_STYLESHEET is set to empty.

Since:

1.6.0.Final

Author:

Boris Unckel

Method Summary

Modifier and Type	Method	Description
static TransformerFactory	create()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

create

@NotNull
public static TransformerFactory create()