[NIFI-11029] Add Standard XML Parsing to ExtractCCDAAttributes

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.20.0
• Component/s: Extensions
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 06/Jan/23 18:47
• Updated: 26/Apr/23 09:26
• Resolved: 06/Jan/23 21:11

Description

The ExtractCCDAAttributes Processor uses a custom CDAUtil class to load and parse the FlowFile InputStream. The CDAUtil class also includes a load method that takes a standard DOM Document. The Processor should be updated to use the standard nifi-xml-processing library for parsing the XML prior to calling CDAUtil.load.

In addition to implementing standard XML parsing, the ExtractCCDAAttributes Processor should be deprecated for removal because the implementation relies on outdated libraries, and the extensive use of FlowFile attributes does not align with best practices for record-oriented data handling.

Issue Links

• is related to: NIFI-11484 Fix CVE-2023-22832: Improper Restriction of XML External Entity References in ExtractCCDAAttributes
• links to: GitHub Pull Request #6828