Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

XML bomb vulnerability #203

Closed
PatrickGotthard opened this issue Jun 26, 2015 · 0 comments
Closed

XML bomb vulnerability #203

PatrickGotthard opened this issue Jun 26, 2015 · 0 comments

Comments

@PatrickGotthard
Copy link
Member

The current configuration of the SAXParser is vulnerable for an XML bomb attack.

The feature "http://apache.org/xml/features/disallow-doctype-decl" of the SAXBuilder must be set to "true" in order to fix the vulnerability.
PatrickGotthard added a commit that referenced this issue Jun 26, 2015
@PatrickGotthard
Fixed #203 - XML bomb vulnerability
44a17c3 
The current configuration of the SAXParser is vulnerable for an XML bomb
attack. The feature
"http://apache.org/xml/features/disallow-doctype-decl" of the SAXBuilder
must be set to "true" in order to fix the vulnerability.
@PatrickGotthard PatrickGotthard mentioned this issue Jul 5, 2021
Closed
@Athou Athou mentioned this issue Feb 21, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@PatrickGotthard