[MAPREDUCE-7411] Use secure XML parser utils in MapReduce

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0, 3.3.5
• Fix Version/s: 3.4.0, 3.3.5
• Component/s: mrv1, mrv2
• Labels: pull-request-available
• Target Version/s: 3.4.0, 3.3.5
• Hadoop Flags: Reviewed
• Assignee: PJ Fanning
• Reporter: PJ Fanning
• Created: 06/Oct/22 20:28
• Updated: 11/Feb/24 10:55
• Resolved: 26/Oct/22 10:17

Description

Uptake of HADOOP-18469

If anyone is landing on this page following any security scanner alert, know that there is no known issue here, just a centralisation of all construction of XML parsers with lockdown of all the features.

Issue Links

• relates to: HADOOP-18469 Add XMLUtils methods to centralise code that creates secure XML parsers
• links to: GitHub Pull Request #4980