[XERCESJ-1455] New system property to limit entity expansion

• Type: Improvement
• Status: Resolved
• Priority: Trivial
• Resolution: Won't Fix
• Affects Version/s: 2.7.1, 2.8.0, 2.8.1, 2.9.0, 2.9.1, 2.10.0
• Component/s: JAXP (javax.xml.parsers)
• Environment: all
• Assignee: Unassigned
• Reporter: yuechen
• Created: 24/Jun/10 18:34
• Updated: 05/Jul/10 02:45
• Resolved: 05/Jul/10 02:45

Description

when setting org.apache.xerces.util.SecurityManager, default entityExpansionLimit is 100,000. this is still too high in many cases. although security Manager does have a setter for entityExpansionLimit, it will be more user friendly to have a new system property to limit entity expansion, such as the one in Sun's JAXP implementation: http://java.sun.com/j2se/1.5.0/docs/guide/xml/jaxp/JAXP-Compatibility_150.html#JAXP_security