TestNG by default disables loading DTD from unsecure Urls

Question

I'm using testng maven and selenium to run my tests, currently I have the following testng.xml file

Looks like the problem is with the &listeners and &classes lines, If I replace those lines with the xml content that I have on the referenced files it runs fine. I have used this in a previous project and it worked fine, not sure why I'm getting this error.

<?xml version = "1.0" encoding = "UTF-8"?>
<!DOCTYPE suite SYSTEM "http://testng.org/testng-1.0.dtd"   [
        <!ENTITY listeners SYSTEM "listeners.xml">
        <!ENTITY classes SYSTEM "classes.xml">
        ]>
<suite name="Local Execution" verbose="5">
    &listeners;
    <test name="Core Integration Tests" time-out="800000">
        <groups>
            <run>
                <include name="failed"/>
            </run>
        </groups>
        &classes;
    </test>
</suite>

Listener.xml content is like

<listeners>
    <listener class-name="com.myclass.Listeners.TestListener"/>
</listeners>

And classes file is

<classes>
    <class name="com.orders.tc_class1"/>
    <class name="com.orders.tc_class2"/>
</classes>

This is part of the error I'm getting

org.testng.TestNGException: 
TestNG by default disables loading DTD from unsecure Urls. If you need to explicitly load the DTD from a http url, please do so by using the JVM argument [-Dtestng.dtd.http=true]
    at org.testng.xml.TestNGContentHandler.resolveEntity(TestNGContentHandler.java:102)

This is new implementation for security https://github.com/cbeust/testng/pull/2023/files . As message says set JVM argument [-Dtestng.dtd.http=true] — Rahul L, Aug 01 '19 at 09:39
Thanks @RahulL but how can I add that argument if I'm running the test from intellij, right click on the xml and then run — msiles, Aug 01 '19 at 13:25
Add in VMs parameters https://testng.org/doc/idea.html or search — Rahul L, Aug 01 '19 at 13:53
Also if you add maven dependency but forget to add testng.jar file as external library, same error occurs. — TeachMeJava, Aug 07 '20 at 09:25
IntelliJ is fixing this: https://youtrack.jetbrains.com/issue/IDEA-234765 — PHPGuru, Nov 24 '20 at 23:37

score 44 · Accepted Answer · edited Dec 08 '20 at 01:06

44

Yes, that's the default behavior of TestNG and I had introduced it through that pull request to fix the bug https://github.com/cbeust/testng/issues/2022

To set the JVM arguments in intelliJ, choose Run > Edit Configurations, and add this JVM argument in the VM options section after -ea (which would be there by default.

For more information on editing configurations, please refer to the official documentation here

Added screenshot for easy to find in Intellij

Argument value

-ea -Dtestng.dtd.http=true

If the above does not work do at template level, this will fix it, which is

Run--> Edit configuration --> template --> testng

edited Dec 08 '20 at 01:06

Gaurav Khurana

3,423
2
29
38

answered Aug 02 '19 at 04:12

Krishnan Mahadevan

14,121
6
34
66

How can I execute tests with no internet access? I get a `Connection Timeout` error with that arg. – Boss Man Aug 04 '20 at 15:02
1

Add what JVM argument? – Joe Coder Aug 28 '20 at 20:58
2

This shouldn't be the accepted answer as it is incomplete, the other answer has the correct solution, include "-Dtestng.dtd.http=true" – Csa77 Sep 08 '20 at 19:43
7

This is a workaround anyway. The proper solution would be to change url in to https. As per answer by @Amerousful – Alissa Oct 29 '20 at 14:52
worked on me.thanks – Rashad Nasirli Nov 20 '21 at 21:24
made someone's day. Thank you – Rashad Nasirli Jan 06 '22 at 08:08

score 42 · Answer 2 · answered Oct 20 '20 at 14:34

42

Just change all yours

<!DOCTYPE suite SYSTEM "http://testng.org/testng-1.0.dtd"

on https:

<!DOCTYPE suite SYSTEM "https://testng.org/testng-1.0.dtd"

answered Oct 20 '20 at 14:34

Amerousful

2,292
1
12
26

nice! as simple as that! no sarcasm. worked for me. – Prostak Oct 22 '20 at 22:17
This iis the more appropriated answer. – Hola Soy Edu Feliz Navidad Oct 24 '20 at 06:21
7

This is so much better than making all your team add some stuff to run config. @msiles would you mind changing accepted answer to this? The other ones are more of a workaround... – Alissa Oct 29 '20 at 14:52
This worked for me today. Followed by a refresh of the file, rebuild and re-run. Thanks! – Debra Bula Feb 09 '21 at 15:28
But I don't have this DOCTYPE stuff in my project, and I still got this error. – Ascendant Mar 12 '21 at 18:35
This worked for me, this needs more upvote – Gooner4Life Jul 22 '21 at 21:47

score 13 · Answer 3 · answered May 18 '20 at 09:01

13

Right Click on the class, select Run--> Run configuration
By default one testNg class will be generated with same class name under testng option
Select that class and go to Arguments tab
In the VM arguments provide -Dtestng.dtd.http=true

Thats it.

answered May 18 '20 at 09:01

Arghya Mukherjee

185
1
7

Satyendra Sharma · Answer 4 · 2020-08-08T13:55:09.407

10

Just to avoid confusion and make it easier for some one who is new to the Config edit option etc attaching a snap for getting it done in intellij.

So as answered by- Mr Krishnan M. : Go to Edit Config for your Cucumber TestNGRunner class, then we have to add another argument to the VM options as below-

How to Edit Run Config
How to add >VM argument: "-Dtestng.dtd.http=true"

edited Aug 08 '20 at 13:55

answered Aug 08 '20 at 13:48

Satyendra Sharma

1,436
13
19

I add like this. When i run using the button on toolbar then it works, But if i righclick on the class file and runs, another run configuration is getting created without the argument and it runs using that one so again gets that error – anandhu Feb 17 '21 at 10:28

score 7 · Answer 5 · answered Nov 30 '20 at 08:32

7

If you run your project only from the eclipse/other IDE's update your TestNG preferences and add statement -Dtestng.dtd.http=true in JVM_args.
If you are looking for a general fix where you run maven from CLI as well then update all your TestNG.xml files

FROM

 <!DOCTYPE suite SYSTEM "http://testng.org/testng-1.0.dtd" >

TO:

<!DOCTYPE suite SYSTEM "https://testng.org/testng-1.0.dtd" >

I personally prefer updating the DOCTYPE.

answered Nov 30 '20 at 08:32

Farhaan Shaik

123
1
2
8

2

Even creator is not sure about the fix , thanks for ths – PDHide Feb 14 '21 at 14:04

score 6 · Answer 6 · edited Sep 01 '20 at 14:19

6

Adding those VM options : -ea -Dtestng.dtd.http=true solved this problem.
But if you want to solve it for each run either for any class or method, you need to add the same in TestNG template, please refer to this screenshot. Intelij TestNg Template SS

edited Sep 01 '20 at 14:19

IQbrod

2,060
1
6
28

answered Sep 01 '20 at 12:28

archit agarwal

91
1
2

1

Definitely the best answer: fixing the template solves the issue for all test runs – ochedru Sep 03 '20 at 08:25
The best answer. – RoyalTiger Sep 08 '20 at 07:31
you duplicated my answer https://stackoverflow.com/a/63517935/3470233 – IPlato Sep 21 '20 at 06:05

score 5 · Answer 7 · answered Aug 21 '20 at 06:42

5

Another option, if want it work for all the tests, regardless where you run them from, set the option in the pom by setting a system property. Add the following for maven-surefire-plugin and maven-failsafe-plugin

                    <configuration>
                        <systemPropertyVariables>
                            <testng.dtd.http>true</testng.dtd.http>
                        </systemPropertyVariables>
                    </configuration>

answered Aug 21 '20 at 06:42

IPlato

191
2
7

Thank you for pointing this out -- I don't want my project's participants go through the same pain of setting up the IntelliJ testng run config and this option really helps. – Changgull Song Sep 18 '20 at 22:44
Thank You. You saved my day with this easy approach. – Deepak May 01 '21 at 08:19

score 3 · Answer 8 · answered Nov 12 '20 at 16:23

3

Change "http://testng.org/testng-1.0.dtd" to "https://testng.org/testng-1.0.dtd" in your suite file.

answered Nov 12 '20 at 16:23

Vishal Jagtap

896
11
16

score 3 · Answer 9 · answered Nov 17 '20 at 06:05

3

In the TestNG file change the value (http) inside the <!DOCTYPE> parameter into https as highlighted in the below image. That is it.

answered Nov 17 '20 at 06:05

Suresh Madhusanka Rodrigo

131
1
11

1

This is the solution, do not know, why no one is upvolting it. – Gaj Julije Mar 19 '21 at 14:51

score 2 · Answer 10 · answered Oct 12 '20 at 11:16

Details Exception is as follows:- org.testng.TestNGException: TestNG by default disables loading DTD from unsecured Urls. If you need to explicitly load the DTD from a http url, please do so by using the JVM argument [-Dtestng.dtd.http=true]

To fix the Exception it needs to set the JVM arguments. To set the JVM arguments in Eclipse:

Open Eclipse and go to Window -> Preferences
Expand TestNG at left-hand side and click Run/Debug
At right-hand side: Type the following text in the JVM args text field: -Dtestng.dtd.http=true
Click Apply and Close button

score 1 · Answer 11 · answered Aug 21 '20 at 06:56

To fix this for all tests run from IntelliJ only, can update the TestNG template with the -Dtestng.dtd.http=true vm option. Will need to delete existing test runs or manually add the vm option (I'd just remove them). All the tests run following the template change will have the mentioned vm option. Run/Debug Configurations -> Edit Configurations -> Templates -> TestNG

score 1 · Answer 12 · answered Aug 27 '20 at 19:55

Please follow all the steps as below. Works perfectly after configuring JVM arguments in Eclipse.

Problem Statement:

TestNG by default disables loading DTD from unsecure Urls If you need to explicitly load the DTD from a http url, please do so by using the JVM argument [-Dtestng.dtd.http=true]

Often we need to use certain VM arguments on the JVM that launches the Rule Project.

To do so, the following 2 steps are needed: • Define a new installed JRE with default JVM arguments: -- Go to the Eclipse Window > preferences > Java > Installed JREs". -- Select the Default JRE and Click on Duplicate. -- Change the JRE name as per your choice, for example myJRE and Enter the Default VM arguments as “-Dtestng.dtd.http=true” enter image description here

-- Click Finish. --- Uncheck the default JRE and check the new JRE added with VM arguments. --- Click Apply, Apply and Close.

• Configure the Rule Project launch configuration to use the new installed JRE: -- Go to the Run > Run Configurations --- Run Configuration Dialog is in view.

enter image description here

--- Enter the Name of your choice, for example: RunConfigWithJVMArgs. --- Test tab:  Project name by default displayed.  Select the “Suite” option and browse for your testng.xml file present in your project folder. For example: src/main/resources/testng.xml enter image description here

--- Arguments tab:  Enter ““-Dtestng.dtd.http=true” in the VM arguments text field. --- JRE tab:  Select “Alternate JRE : “ as the newly added JRE with JVM arguments. --- No other changes required. --- Click Apply and then Run.

If the suite starts and runs successfully in Eclipse, then it will work when you run the packaged JAR file as well.

Note: Perform mvn clean and mvn package –Dmaven.test.skip=true after changing the above configurations in Eclipse.

Once the JAR is ready, it will have the new JRE configured with JVM arguments and it will fix the problem statement.

score 1 · Answer 13 · answered Nov 29 '20 at 16:30

To solve this problem in Eclipse follow following steps:

Go to windows -> Preferences->TestNG->Run/Debug
In JVM_args add the following -Dtestng.dtd.http=true
Click on Apply and close button.
Right-click on your project select Maven -> Update project
Now go to your pom.xml and click on Run as ->Maven Test

Now below problem "TestNG by default disables loading DTD from unsecure Urls" will not be there.

score 0 · Answer 14 · answered Aug 17 '20 at 06:03

I came across this error recently and tried the solutions given above but still got the error. Setting JVM arguments is the solution for this problem anyways as shown in above answers but I added one more step and it fixed my issue.

I changed the arguments in TestNG Configuration as shown below (added step):
I also changed the arguments in LoginTests.testSuccessfullLogin. (This step would only be necessary if you have ran the program with the issue. Otherwise if you are running the program for first time, it will create this configuration with the same arguments as in TestNG configuration.)

I also noticed that if you haven't done the second step mentioned above, it will create a new configuration called LoginTests.testSuccessfullLogin(1) with the changed arguments in order to run the tests.

score 0 · Answer 15 · answered Feb 13 '22 at 09:44

0

I too faced this issue. I was unable to run the test from my xml file with right click run. So, the solution that I did was change the "" in the xml file to "https://... " and it solved the issue. Thanks

answered Feb 13 '22 at 09:44

karunya goyal

1

TestNG by default disables loading DTD from unsecure Urls

15 Answers15

Linked