[ARTEMIS-4077] Add an option to disable XML external entity processing

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.28.0
• Assignee: Domenico Francesco Bruscino
• Reporter: Domenico Francesco Bruscino
• Created: 28/Oct/22 11:56
• Updated: 14/Feb/23 10:26
• Resolved: 18/Jan/23 20:59

Description

Processing XML external entities when it isn't needed exposes the system to unnecessary risks. ActiveMQ Artemis is using xml include to support modularising broker.xml but providing an option to disable XML external entity processing would be useful for users that are not using that feature.

Issue Links

• links to: GitHub Pull Request #4290