Support auto-throwing EntityResolver in default ParserPool
Basics
Logistics
Basics
Logistics
Description
The default configuration of the BasicParserPool class doesn’t include an EntityResolver. Based on testing, and other changes, it is expected to be true that none of our core parsing should ever involve any external entities. Having the option to block all entity resolution in this layer seems wise, possibly defaulting to that for V5.
Environment
None
Activity
Scott Cantor December 8, 2022 at 7:38 PM
This is done on both branches, defaulting off for 4.3 at the moment and on for 5.0. I suspect we may be fine just enabling it by default for 4.3 after some real world testing.
The default configuration of the BasicParserPool class doesn’t include an EntityResolver. Based on testing, and other changes, it is expected to be true that none of our core parsing should ever involve any external entities. Having the option to block all entity resolution in this layer seems wise, possibly defaulting to that for V5.