Bug 24052: Add koha_xslt_security to koha-conf.xml
[koha-equinox.git] / etc / koha-conf.xml
index 519a9cc..5be267d 100644 (file)
@@ -250,5 +250,13 @@ __PAZPAR2_TOGGLE_XML_POST__
     </repo>
  </plugin_repos>
 
+ <koha_xslt_security>
+ <!-- Uncomment the following entry ONLY when you explicitly want the XSLT
+      parser to expand entities like <!ENTITY secret SYSTEM "/etc/secrets">.
+      This is unsafe and therefore NOT recommended!
+     <expand_entities_unsafe>1</expand_entities_unsafe>
+ -->
+ </koha_xslt_security>
+
 </config>
 </yazgfs>