You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Domenico Francesco Bruscino (Jira)" <ji...@apache.org> on 2022/10/28 11:57:00 UTC

[jira] [Created] (ARTEMIS-4077) Add an option to disable XML external entity processing

Domenico Francesco Bruscino created ARTEMIS-4077:
----------------------------------------------------

             Summary: Add an option to disable XML external entity processing
                 Key: ARTEMIS-4077
                 URL: https://issues.apache.org/jira/browse/ARTEMIS-4077
             Project: ActiveMQ Artemis
          Issue Type: Improvement
            Reporter: Domenico Francesco Bruscino
            Assignee: Domenico Francesco Bruscino


Processing XML external entities when it isn't needed exposes the system to unnecessary risks. ActiveMQ Artemis is using xml include to support [modularising broker.xml|https://github.com/apache/activemq-artemis/blob/main/docs/user-manual/en/configuration-index.md#modularising-brokerxml] but providing an option to disable XML external entity processing would be useful for users that are not using that feature.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)