> For the complete documentation index, see [llms.txt](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/by-vulnerability/xxe/by-language/java/vulnerable-libraries-implementation.md).

# Vulnerable Libraries' Implementation

## javax.xml.transform.Transformer

"*Can occur when a `javax.xml.transform.Transformer` is created without enabling "Secure Processing" or when one is created without disabling resolving of both external DTDs and DTD entities.*" 

{% embed url="<https://rules.sonarsource.com/java/RSPEC-4435>" %}