Details
-
Type:
New Feature
-
Status:
In Progress
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: 4.1
-
Labels:None
-
Number of attachments :
Description
A recently famous XML security concern (that of expanding local files via external entity references, from the internal dtd subset) gave an idea of one more profile that users might want enable: that of "secure" mode. Initially the only thing that might do would to prevent expansion of (external) entities; but additionally it could also disable coalecing to try to prevent chance of choking on very long text segments.
For completeness, same profile could be added to output side, even if there are no settings immediately affected?
Since this would mean adding a new method, it should go in Woodstox 4.1, not 4.0, as it is an API change. If it needs to go in Stax2 api, it would further have to be postponed until 5.0.