setDisallowDocTypeDeclaration

git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1894221 13f79535-47bb-0310-9956-ffa450edef68

poi-ooxml/src/main/java/org/apache/poi/ooxml/POIXMLTypeLoader.java

@@ -40,7 +40,7 @@ public class POIXMLTypeLoader {
         DEFAULT_XML_OPTIONS.setUseDefaultNamespace();
         DEFAULT_XML_OPTIONS.setSaveAggressiveNamespaces();
         DEFAULT_XML_OPTIONS.setCharacterEncoding("UTF-8");
-        //DEFAULT_XML_OPTIONS.setDisallowDocTypeDeclaration(true);
+        DEFAULT_XML_OPTIONS.setDisallowDocTypeDeclaration(true);
         DEFAULT_XML_OPTIONS.setEntityExpansionLimit(1);
         // Piccolo is disabled for POI builts, i.e. JAXP is used for parsing
         // so only user code using XmlObject/XmlToken.Factory.parse