Skip to content

Commit

Permalink
Fix one missing word in docs...
Browse files Browse the repository at this point in the history
  • Loading branch information
swaldman committed Mar 16, 2019
1 parent 3aa4e5f commit c61c00b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/doc/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -2757,7 +2757,7 @@ <h4><a name="locating_configuration_information">Locating and Resolving Configur
</p>
<p>
Due to <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-20433">security concerns surrounding liberal parsing of XML references</a>,
c3p0 now XML files extremely restrictively by default. Among other things, it <i>no longer expands entity references in XML config files.
c3p0 now parses XML files extremely restrictively by default. Among other things, it <i>no longer expands entity references in XML config files.
Entity references may be silently ignored!</i> It also no longer support xml includes, and tries to disable any use of inline document type definitions if the JVM's underlying
XML library supports that.
In the <i>very rare cases</i> where configurations intentionally rely upon entity reference expansion, DTDs, XML include, or other dangerous features, you can turn
Expand Down

0 comments on commit c61c00b

Please sign in to comment.