From 91430cf3b5e0706b0d1883b3458d719a08c8e381 Mon Sep 17 00:00:00 2001
From: Steve Waldman Locating and Resolving Configur
that is, in any location you specify under your classpath, including jar-file META-INF directories.
- Due to security concerns surrounding liberal parsing of XML references, as of c3p0-0.9.5.3, c3p0 by default no longer expands entity references in XML config files. - However, installations that understand the full transitive closure of all entity references in their XML config may override this conservative behavior by setting the following property + Due to security concerns surrounding liberal parsing of XML references, + as of c3p0-0.9.5.3, c3p0 by default no longer expands entity references in XML config files. + Entity references may be silently ignored! + However, in the very rare cases where configurations intentionally rely upon entity reference expansion, you can turn it back on. + Installations that understand the full transitive closure of all entity references in their XML config may enable entity reference expansion by setting the following property to true: