From 2d348bf3b3de815fecd545b9d9e635c0c7783d00 Mon Sep 17 00:00:00 2001
From: Abhiram V <61599526+Anon-Artist@users.noreply.github.com>
Date: Sun, 7 Feb 2021 20:55:47 +0000
Subject: [PATCH] Update SVGParser.java

---
 src/main/java/com/bonnyfone/vectalign/SVGParser.java | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/main/java/com/bonnyfone/vectalign/SVGParser.java b/src/main/java/com/bonnyfone/vectalign/SVGParser.java
index 1bc691c..28dcfdf 100644
--- a/src/main/java/com/bonnyfone/vectalign/SVGParser.java
+++ b/src/main/java/com/bonnyfone/vectalign/SVGParser.java
@@ -62,10 +62,15 @@ public static String getPathDataFromSVGFile(File f){
 
     private static Document getXMLDocumentFromFile(File f) throws ParserConfigurationException, IOException, SAXException {
         DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
-        factory.setNamespaceAware(false);
+        factory.setNamespaceAware(true);
         factory.setValidating(false);
+        factory.setXIncludeAware(false);
+        factory.setExpandEntityReferences(false);
         factory.setFeature("http://xml.org/sax/features/namespaces", false);
         factory.setFeature("http://xml.org/sax/features/validation", false);
+        factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
+        factory.setFeature("http://xml.org/sax/features/external-general-entities", false);
+        factory.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
         factory.setFeature("http://apache.org/xml/features/nonvalidating/load-dtd-grammar", false);
         factory.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);
         DocumentBuilder builder = null;