XMLSecureParsingTest.java 文件源码

@Test
public void testSaxParsing() throws ParserConfigurationException,
        SAXException, IOException {
    // given
    byte[] fileAsByteArray = BaseAdmUmTest.getFileAsByteArray(
            this.getClass(), FILE_TEST);
    SAXParserFactory spf = SAXParserFactory.newInstance();
    spf.setNamespaceAware(true);
    spf.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
    assertTrue(spf.getFeature(XMLConstants.FEATURE_SECURE_PROCESSING));
    SAXParser saxParser = spf.newSAXParser();
    XMLReader reader = saxParser.getXMLReader();

    try {
        // when
        reader.parse(new InputSource(new ByteArrayInputStream(
                fileAsByteArray)));
        fail();
    } catch (SAXParseException e) {
        // then
        assertThatMaxEntitiesExceeded(e);
    }
}