java.lang.Object
org.cybergarage.xml.parser.JaxpParser.BlankingResolver
All Implemented Interfaces:
EntityResolver
Enclosing class:
JaxpParser
private static class JaxpParser.BlankingResolverextends Object implements EntityResolver
Entity resolver that returns empty input for all external entities.

This prevents XXE attacks by ensuring that no external entities are loaded during XML parsing.

  • Field Details

    • DUMMY

      private static final byte[] DUMMY
      Empty body returned in place of an entity.

  • Constructor Details

    • BlankingResolver

      private BlankingResolver()
      Refuses to fetch any external entity.

  • Method Details

    • resolveEntity

      public InputSource resolveEntity(String arg0, String arg1)
      Resolves external entities by returning empty input.
      Specified by:
      resolveEntity in interface EntityResolver
      Parameters:
      arg0 - the public identifier (may be null)
      arg1 - the system identifier (may be null)
      Returns:
      an empty InputSource