Skip to content

Harden server against xxe's globally - #447

Open
mgaffigan wants to merge 1 commit into
OpenIntegrationEngine:mainfrom
mgaffigan:feat/harden-xxe
Open

mgaffigan wants to merge 1 commit into
OpenIntegrationEngine:mainfrom
mgaffigan:feat/harden-xxe

Conversation

@mgaffigan

Copy link
Copy Markdown
Contributor

Configures JAXP to set XXE disabling options by default. Does not protect against all XXE's, but would have prevented the last three we were affected by.

Signed-off-by: Mitch Gaffigan <mitch.gaffigan@comcast.net>
@github-actions

Copy link
Copy Markdown

Test Results

123 files  ±0  123 suites  ±0   2m 54s ⏱️ + 1m 5s
690 tests ±0  690 ✅ ±0  0 💤 ±0  0 ❌ ±0 
702 runs  ±0  702 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit bd1298b. ± Comparison against base commit 9359d9a.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant