[OPENEJB-968] XML system entities do not work

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.0, 3.1
• Component/s: configuration, tomee
• Assignee: Unassigned
• Reporter: Dain Sundstrom
• Created: 04/Dec/08 18:26
• Updated: 02/Jun/09 13:28

Description

NamespaceFilter used to disable DTD downloading in JaxB also disables SYSTEM entity references in the XML. For example, the following will cause a null pointer exception in the tomcat integration:

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
"http://java.sun.com/j2ee/dtds/web-app_2.3.dtd" [
<!ENTITY inclusionFile SYSTEM "file.xml" >
]
>
<web-app>
&inclusionFile;
</web-app>

This problem exists in all JaxB parsing code.