XMLFactorySAX javaodc #87

Author: fugerit79

fj-core/src/main/java/org/fugerit/java/core/xml/sax/XMLFactorySAX.java

@@ -62,6 +62,22 @@ public static XMLFactorySAX newInstance(boolean validating, boolean namespaceAwa
         return newInstance( validating, namespaceAware, Boolean.FALSE );
     }
 
+    /**
+     * Creates a new XMLFactorySAX wrapping a javax.xml.parsers.SAXParserFactory
+     *
+     * if the secure flag is set, the external entities will be disabled :
+     *
+         factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
+         factory.setFeature("http://xml.org/sax/features/external-general-entities", false);
+         factory.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
+         factory.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);
+     *
+     * @param validating        to set the XMLFactorySAX as validating
+     * @param namespaceAware    to set the XMLFactorySAX as namespaceAware
+     * @param secure            to set the XMLFactorySAX as secure (external entities disabled)
+     * @return                  the new configured XMLFactorySAX
+     * @throws XMLException     in case any issue arise
+     */
     public static XMLFactorySAX newInstance(boolean validating, boolean namespaceAware, boolean secure) throws XMLException {
         return XMLException.get( () -> {
             SAXParserFactory factory = SAXParserFactory.newInstance();