Uploaded image for project: 'RESTEasy'
  1. RESTEasy
  2. RESTEASY-669

RestEasy and XXE injection - Services that accept XML are vulnerable to XXE attacks, Part III: Fastinfoset

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 3.0.4.Final
    • None
    • jaxrs
    • None
    • Medium

      For description, see RESTEASY-637 and RESTEASY-647. I fixed the problem for org.w3c.dom.Document inputs and JAXB XML inputs, but not for fastinfoset representation.

              rsigal@redhat.com Ronald Sigal
              adkathuria_jira anuj kathuria (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: