Details
-
Enhancement
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
False
-
None
-
False
Description
Add factories with secure defaults for
- javax.xml.validation.SchemaFactory
- javax.xml.xpath.XPathFactory
with values according to https://docs.oracle.com/en/java/javase/13/security/java-api-xml-processing-jaxp-security-guide.html#GUID-94ABC0EE-9DC8-44F0-84AD-47ADD5340477
Attachments
Issue Links
- relates to
-
WFCOM-66 New XML Factories with Restriction of XML External Entity Reference (XXE)
- Resolved