To those of you contemplating changes to document builder factory caching, please note that I have just committed a change to XMLParserUtils.java that you should grab. Based on a bugtraq posting (http://online.securityfocus.com/archive/1/297714/2002-10-27/2002-11-02/ 0), I have added code to disable expansion of entity references by default.
Scott Nichol -- To unsubscribe, e-mail: <mailto:soap-dev-unsubscribe@;xml.apache.org> For additional commands, e-mail: <mailto:soap-dev-help@;xml.apache.org>