TryCF Gist

trycf-gist-1692167541257-b5134225-358a-3c46-a492-a49a230d3136.cfm

<cfscript>
    
//trycf has lucee.xmlfeatures.override.disable=true set

str= '<?xml version="1.0" encoding="ISO-8859-1"?>
			<!DOCTYPE hibernate-mapping PUBLIC "-//Hibernate/Hibernate Mapping DTD 3.0//EN" "http://www.hibernate.org/dtd/hibernate-mapping-3.0.dtd">
			<hibernate-mapping></hibernate-mapping>';
			
dump(isXml(str)); // only returns boolean

dump(isXml(str, {
    "secure": true,
	"disallowDoctypeDecl": true,
	"externalGeneralEntities": false
})); // xmlfeatures override ignored

flush;

try {
    dump( xmlParse( str, false, {
		"secure": true,
		"disallowDoctypeDecl": true,
		"externalGeneralEntities": false
	})); // xmlfeatures override ignored
} catch(e){
	echo(e);
}
</cfscript>