chore: fix security issue https://github.com/fugerit-org/junit5-tag-check-maven-plugin/security/code-scanning/1

Author: fugerit79

CHANGELOG.md

@@ -16,6 +16,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - fj-doc-version 8.17.9
 - report generation engine with [Venus Fugerit Doc](https://github.com/fugerit-org/fj-doc)
 
+### Fixed
+
+- security issue <https://github.com/fugerit-org/junit5-tag-check-maven-plugin/security/code-scanning/1>
+
 ## [1.0.2] - 2025-11-26
 
 ### Fixed

src/main/java/org/fugerit/java/junit5/tag/check/facade/TagSurefireFacade.java

@@ -4,6 +4,7 @@
 import org.dom4j.Document;
 import org.dom4j.Element;
 import org.dom4j.io.SAXReader;
+import org.fugerit.java.core.function.SafeFunction;
 import org.fugerit.java.junit5.tag.check.model.ExecutedTest;
 
 import java.io.File;
@@ -19,6 +20,7 @@ private TagSurefireFacade() {}
     public static List<ExecutedTest> parseSurefireReports( File surefireReportsDirectory, boolean includeSkipped ) {
         List<ExecutedTest> executedTests = new ArrayList<>();
         SAXReader reader = new SAXReader();
+        SafeFunction.apply( () -> reader.setFeature("http://apache.org/xml/features/disallow-doctype-decl", Boolean.TRUE ) );
 
         // Find all XML report files
         File[] reportFiles = surefireReportsDirectory.listFiles(