made resolveExternalEntities depend of workspace trust

redhat-developer · Jul 7, 2021 · 1e7ceb9 · 1e7ceb9
1 parent 4912bfa
commit 1e7ceb9
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/settings/settings.ts b/src/settings/settings.ts
@@ -222,6 +222,14 @@ export function getXMLSettings(javaHome: string | undefined, logfile: string, ex
     enabled: workspace.getConfiguration('redhat.telemetry').get('enabled', false)
   };
 
+  // Check workspace trust
+  const isWorkspaceTrusted = (workspace as any).isTrusted;
+  if (!isWorkspaceTrusted) {
+    xml['xml']['validation']['resolveExternalEntities'] = false;
+  } else {
+    xml['xml']['validation']['resolveExternalEntities'] = workspace.getConfiguration('xml').get('validation.resolveExternalEntities', false);
+  }
+
   //applying externalXmlSettings to the xmlSettings
   externalXmlSettings.xmlCatalogs.forEach(catalog => {
     if (!xml['xml']['catalogs'].includes(catalog)) {