[YARN-11330] Use secure XML parser utils in YARN

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.4
• Fix Version/s: 3.4.0, 3.3.5
• Component/s: yarn
• Labels: pull-request-available
• Target Version/s: 3.4.0, 3.3.5
• Hadoop Flags: Reviewed
• Assignee: PJ Fanning
• Reporter: PJ Fanning
• Created: 06/Oct/22 20:35
• Updated: 28/Jan/24 05:01
• Resolved: 26/Oct/22 09:45

Description

Uptakes HADOOP-18469

If anyone is landing on this page following any security scanner alert, know that there is no known issue here, just a centralisation of all construction of XML parsers with lockdown of all the features.

Issue Links

• relates to: HADOOP-18469 Add XMLUtils methods to centralise code that creates secure XML parsers
• links to: GitHub Pull Request #4981
• links to: GitHub Pull Request #5017