diff --git a/History.md b/History.md index 732fe79e..9bd421c6 100644 --- a/History.md +++ b/History.md @@ -5,6 +5,8 @@ - #905 Parse product level charges/discounts into JSON - #869 Import Account Holder returns SellerTradeParty.name instead of AccountHolder - #861 Multiple problems with Product.CountryOfOrigin +- #899 +- #901 - #908 Validation: Make clear when embedded file name is wrong - #909 - #913 downgrade PDF/A errors to warnings diff --git a/library/src/main/java/org/mustangproject/ZUGFeRD/ZUGFeRDInvoiceImporter.java b/library/src/main/java/org/mustangproject/ZUGFeRD/ZUGFeRDInvoiceImporter.java index ce3eaa0d..fce06f01 100644 --- a/library/src/main/java/org/mustangproject/ZUGFeRD/ZUGFeRDInvoiceImporter.java +++ b/library/src/main/java/org/mustangproject/ZUGFeRD/ZUGFeRDInvoiceImporter.java @@ -326,7 +326,7 @@ public class ZUGFeRDInvoiceImporter { final DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance(); //REDHAT //https://www.blackhat.com/docs/us-15/materials/us-15-Wang-FileCry-The-New-Age-Of-XXE-java-wp.pdf - dbf.setAttribute(XMLConstants.FEATURE_SECURE_PROCESSING, true); + dbf.setFeature("http://javax.xml.XMLConstants/feature/secure-processing", true); dbf.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, ""); dbf.setAttribute(XMLConstants.ACCESS_EXTERNAL_SCHEMA, "");