Method loadXML

core/src/main/java/com/onelogin/saml2/util/Util.java:170–183

This function load an XML string in a save way. Prevent XEE/XXE Attacks @param xml String. The XML string to be loaded. @return The result of load the XML at the Document or null if any error occurs

(String xml)

	 * @return The result of load the XML at the Document or null if any error occurs
	 */
	public static Document loadXML(String xml) {
		try {
			if (xml.contains("<!ENTITY")) {
				throw new XMLEntityException("Detected use of ENTITY in XML, disabled to prevent XXE/XEE attacks");
			}
			return convertStringToDocument(xml);
		} catch (XMLEntityException e) {
			LOGGER.debug("Load XML error due XMLEntityException.", e);
		} catch (Exception e) {
			LOGGER.debug("Load XML error: " + e.getMessage(), e);
		}

		return null;
	}

	private static XPathFactory getXPathFactory() {
		try {