From a39907de7652cfd552ba4e11e5a05cd26897c43b Mon Sep 17 00:00:00 2001
From: Pedro Igor <pedroigor@gmail.com>
Date: Wed, 1 Jun 2016 16:43:02 -0300
Subject: [PATCH] [KEYCLOAK-3068] - Setting XInclude to false

---
 .../main/java/org/keycloak/saml/common/util/DocumentUtil.java   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/saml-core/src/main/java/org/keycloak/saml/common/util/DocumentUtil.java b/saml-core/src/main/java/org/keycloak/saml/common/util/DocumentUtil.java
index 7838859266b..b46220b0313 100755
--- a/saml-core/src/main/java/org/keycloak/saml/common/util/DocumentUtil.java
+++ b/saml-core/src/main/java/org/keycloak/saml/common/util/DocumentUtil.java
@@ -519,7 +519,7 @@ public class DocumentUtil {
                 }
                 documentBuilderFactory = DocumentBuilderFactory.newInstance();
                 documentBuilderFactory.setNamespaceAware(true);
-                documentBuilderFactory.setXIncludeAware(true);
+                documentBuilderFactory.setXIncludeAware(false);
                 String feature = "";
                 try {
                     feature = feature_disallow_doctype_decl;