New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Implemented fixes for possible XXE attacks to XML parsers. #2368

Merged

nicolatimeus merged 1 commit into develop from fix_xxe-attack

Feb 7, 2019

Contributor

MMaiero commented Feb 1, 2019

Signed-off-by: Maiero [email protected]


          Implemented fixes for possible XXE attacks to XML parsers.

68e54b9

Signed-off-by: Maiero <[email protected]>

Contributor Author

MMaiero commented Feb 1, 2019 •

edited

Loading

References: https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet#JAXP_DocumentBuilderFactory.2C_SAXParserFactory_and_DOM4J
https://gist.github.com/asudhakar02/45e2e6fd8bcdfb4bc3b2

MMaiero requested a review from nicolatimeus

February 6, 2019 15:24

nicolatimeus approved these changes

View reviewed changes

nicolatimeus merged commit 3c58b4f into develop

nicolatimeus deleted the fix_xxe-attack branch

February 7, 2019 14:29

MMaiero added the kura-sec label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels