[BATIK-1276] Allow blocking of external resources

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.13
• Assignee: Simon Steiner
• Reporter: Simon Steiner
• Created: 09/Dec/19 12:22
• Updated: 15/Jun/20 08:37
• Resolved: 09/Dec/19 12:29

Description

java -cp batik/lib/*:batik/batik-1.13.0-SNAPSHOT/lib/batik-all-1.13.0-SNAPSHOT.jar org.apache.batik.apps.rasterizer.Main -scriptSecurityOff -blockExternalResources test.svg

 

Should stop xlink:href value being read

 

Fixes CVE-2019-17566