From 817ea03656fa33bfae6019285ffa3ec9ee6559c2 Mon Sep 17 00:00:00 2001
From: Joel Verhagen <jver@microsoft.com>
Date: Tue, 14 Jul 2020 12:09:16 -0700
Subject: [PATCH] Fix fxcop issue

---
 .../App_Start/GalleryMachineKeyConfigurationProvider.cs        | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/NuGetGallery/App_Start/GalleryMachineKeyConfigurationProvider.cs b/src/NuGetGallery/App_Start/GalleryMachineKeyConfigurationProvider.cs
index 5ccf2cccb3..04ef8d3f38 100644
--- a/src/NuGetGallery/App_Start/GalleryMachineKeyConfigurationProvider.cs
+++ b/src/NuGetGallery/App_Start/GalleryMachineKeyConfigurationProvider.cs
@@ -14,7 +14,8 @@ public class GalleryMachineKeyConfigurationProvider : ProtectedConfigurationProv
         public override XmlNode Decrypt(XmlNode encryptedNode)
         {
             var xmlDoc = new XmlDocument();
-            xmlDoc.LoadXml("<machineKey />");
+            xmlDoc.XmlResolver = null;
+            xmlDoc.AppendChild(xmlDoc.CreateElement(string.Empty, "machineKey", string.Empty));
 
             // The machine keys are used for encrypting/decrypting cookies used by ASP.NET, these are usually set by IIS in 'Auto' mode. 
             // During a deployment to Azure cloud service the same machine key values are set on all the instances of a given cloud service,