[SYNCOPE-895] Enable Secure Processing on all DocumentBuilderFactory/TransfomerFactory instances - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.0.0.M5
Component/s: cli
Labels:
None

Description

This task is to enable Secure Processing on all DocumentBuilderFactory/TransfomerFactory instances. This reduces the attack surface when reading XML files, for example it forbids entity expansion attacks.

Attachments

Activity

People

Assignee:: Colm O hEigeartaigh

Reporter:: Colm O hEigeartaigh

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 06/Jul/16 14:14

Updated:: 01/Sep/16 14:45

Resolved:: 27/Aug/16 14:54