Skip to content

Commit 6483a91

Browse files
committed
Mention advanced features of create & parse constructors in readme
1 parent 5630c49 commit 6483a91

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -351,6 +351,22 @@ To produce:
351351
</Projects>
352352
```
353353

354+
### Configuring advanced features
355+
356+
When creating or parsing a document you can enable and disable advanced
357+
features by using the more explicit versions of the `parse()` and `create()`
358+
constructors.
359+
360+
You can:
361+
362+
* use the `enableExternalEntities` flag to enable or disable external entities.
363+
NOTE: you should leave these disabled, as they are by default, unless you
364+
really need them because they open you to XML External Entity (XXE) injection
365+
attacks.
366+
* use the `isNamespaceAware` flag to enable or disable namespace awareness in
367+
the underlying `DocumentBuilderFactory`.
368+
369+
354370
Release History
355371
---------------
356372

0 commit comments

Comments
 (0)