d9270171e519630dd46d713449c04b3a13e9768f,src/org/pentaho/pms/mql/MQLQueryImpl.java,MQLQueryImpl,fromXML,#String#,428
Before Change
Document doc;
// Check and open XML document
dbf = DocumentBuilderFactory.newInstance();
try {
db = dbf.newDocumentBuilder();
doc = db.parse( new InputSource( new java.io.StringReader( XML ) ) );
} catch ( ParserConfigurationException pcx ) {
throw new PentahoMetadataException( pcx );
After Change
Document doc;
// Check and open XML document
try {
DocumentBuilderFactory dbf = XmiParser.createSecureDocBuilderFactory();
DocumentBuilder docBuilder = dbf.newDocumentBuilder();
doc = docBuilder.parse( new InputSource( new java.io.StringReader( XML ) ) );
} catch ( ParserConfigurationException pcx ) {
throw new PentahoMetadataException( pcx );