fix (core): Address real security vulnerability, TX DeepSource JAVA-A…

…1052
enola-dev · Jan 4, 2025 · 860bbdd · 860bbdd
1 parent 0dcbbdf
commit 860bbdd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/java/dev/enola/common/xml/XML.java b/java/dev/enola/common/xml/XML.java
@@ -61,7 +61,7 @@ private static String normalizeXML(InputStream inputStream, boolean format)
         // TODO Use streaming SAX instead of DOM; and break this up... use XmlResourceParser
 
         DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
-        factory.setAttribute(XMLConstants.FEATURE_SECURE_PROCESSING, true); // #security
+        factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); // #security
         DocumentBuilder builder = factory.newDocumentBuilder();
 
         Document document = builder.parse(new InputSource(inputStream));