d9270171e519630dd46d713449c04b3a13e9768f,src/org/pentaho/pms/mql/MQLQueryImpl.java,MQLQueryImpl,fromXML,#String#,428

Before Change


    Document doc;

    // Check and open XML document
    dbf = DocumentBuilderFactory.newInstance();
    try {
      db = dbf.newDocumentBuilder();
      doc = db.parse( new InputSource( new java.io.StringReader( XML ) ) );
    } catch ( ParserConfigurationException pcx ) {
      throw new PentahoMetadataException( pcx );

After Change


    Document doc;
    // Check and open XML document
    try {
      DocumentBuilderFactory dbf = XmiParser.createSecureDocBuilderFactory();
      DocumentBuilder docBuilder = dbf.newDocumentBuilder();
      doc = docBuilder.parse( new InputSource( new java.io.StringReader( XML ) ) );
    } catch ( ParserConfigurationException pcx ) {
      throw new PentahoMetadataException( pcx );