Class SecureXml

java.lang.Object
io.jenkins.plugins.xmleditor.core.parse.SecureXml

public final class SecureXml extends Object
The only place where JAXP factories are created. Every factory uses the JDK built-in implementation (not whatever happens to be on the classpath) with secure processing on, no external entities, no external DTDs or schemas and explicit entity expansion limits. A DOCTYPE is allowed, because real project files contain one, but nothing it references is ever loaded.