[NIFI-9399] Apply Secure Processing to TransformXml XSLT Sources

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.15.0
• Fix Version/s: 1.16.0, 1.15.1
• Component/s: Extensions, Security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 19/Nov/21 18:31
• Updated: 14/Dec/21 15:08
• Resolved: 22/Nov/21 16:56

Description

The TransformXml processor supports Secure Processing as of NiFi 1.3.0, which prevents external access attempts using XML entity references. The Secure Processing property applies to input FlowFiles, but does not apply to the XSLT source that the processor uses during transformation. TransformXml should be updated to apply Secure Processing to XSLT sources.

Issue Links

• is related to: NIFI-4125 Add basic security settings to TransformXml
• links to: GitHub Pull Request #5542