closes #827

History.md

@@ -5,6 +5,8 @@
 - #905 Parse product level charges/discounts into JSON
 - #869 Import Account Holder returns SellerTradeParty.name instead of AccountHolder
 - #861 Multiple problems with Product.CountryOfOrigin
+- #899
+- #901
 - #908 Validation: Make clear when embedded file name is wrong
 - #909
 - #913 downgrade PDF/A errors to warnings 

library/src/main/java/org/mustangproject/ZUGFeRD/ZUGFeRDInvoiceImporter.java

@@ -326,7 +326,7 @@ public class ZUGFeRDInvoiceImporter {
 		final DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
 		//REDHAT
 		//https://www.blackhat.com/docs/us-15/materials/us-15-Wang-FileCry-The-New-Age-Of-XXE-java-wp.pdf
-		dbf.setAttribute(XMLConstants.FEATURE_SECURE_PROCESSING, true);
+		dbf.setFeature("http://javax.xml.XMLConstants/feature/secure-processing", true);
 		dbf.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
 		dbf.setAttribute(XMLConstants.ACCESS_EXTERNAL_SCHEMA, "");