Hi, we just upgraded to 7.6 from 7.4, and doing an analysis picked up a new issue around XXE, which is great.
I just wanted to note that in the text explaining the issue it reads:
To disable external entity processing for
DocumentBuilderFactoryconfigure one of the properties
I wonder if this should read “… configure one of the features …” instead? Very minor, but this object has both setProperty and setFeature functions, so the wording as it is gave me a moment to pause, and just check what was meant.