Make a KB article about DTD processing exception #1676
Description
Consider highlighting the following:
- Report designers do not include any DTD rules in the report definitions.
- The XML parser indeed has a disabled DTD processing as a preventive mechanism against XXE attacks, which could lead to denial of service.
- If the URI of the report source is set to a server (for example, https://localhost:3000/Report1.trdx), and the file's XML is incorrectly served, this could lead to "XmlException: For security reasons DTD is prohibited in this XML document. To enable DTD processing set the DtdProcessing property on XmlReaderSettings to Parse and pass the settings into XmlReader.Create method".
- A potential workaround would be to use a file system path to ensure the abovementioned is not a possibility for the cause, and the issue indeed stems from the definition's content.
- Mention that in such cases, it would be helpful if the user could open a ticket and provide the TRDP/TRDX file for investigation.