[NIFI-4125] Add basic security settings to TransformXml

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Component/s: Core Framework
• Labels: newbie security xslt
• Assignee: Unassigned
• Reporter: Yuri
• Created: 26/Jun/17 16:51
• Updated: 29/Jun/17 18:33
• Resolved: 29/Jun/17 18:33

Description

Since data flows can generally deal with non-trusted data, the processors should handle it in a secure manner.

In case of XML there are various known vulnerabilities - OWASP. Some can be mitigated via XML parser/XSLT Processor features.

The TransformXml processor should have a setting enabling these secure settings.

Issue Links

• links to: GitHub Pull Request #1946