Uploaded image for project: 'Syncope'
  1. Syncope
  2. SYNCOPE-895

Enable Secure Processing on all DocumentBuilderFactory/TransfomerFactory instances

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.0.0.M5
    • Component/s: cli
    • Labels:
      None

      Description

      This task is to enable Secure Processing on all DocumentBuilderFactory/TransfomerFactory instances. This reduces the attack surface when reading XML files, for example it forbids entity expansion attacks.

        Attachments

          Activity

            People

            • Assignee:
              coheigea Colm O hEigeartaigh
              Reporter:
              coheigea Colm O hEigeartaigh
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: