You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2022/11/15 16:07:00 UTC
[jira] [Work logged] (ARTEMIS-4077) Add an option to disable XML external entity processing
[ https://issues.apache.org/jira/browse/ARTEMIS-4077?focusedWorklogId=826187&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-826187 ]
ASF GitHub Bot logged work on ARTEMIS-4077:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 15/Nov/22 16:06
Start Date: 15/Nov/22 16:06
Worklog Time Spent: 10m
Work Description: jbertram merged PR #4290:
URL: https://github.com/apache/activemq-artemis/pull/4290
Issue Time Tracking
-------------------
Worklog Id: (was: 826187)
Remaining Estimate: 0h
Time Spent: 10m
> Add an option to disable XML external entity processing
> -------------------------------------------------------
>
> Key: ARTEMIS-4077
> URL: https://issues.apache.org/jira/browse/ARTEMIS-4077
> Project: ActiveMQ Artemis
> Issue Type: Improvement
> Reporter: Domenico Francesco Bruscino
> Assignee: Domenico Francesco Bruscino
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Processing XML external entities when it isn't needed exposes the system to unnecessary risks. ActiveMQ Artemis is using xml include to support [modularising broker.xml|https://github.com/apache/activemq-artemis/blob/main/docs/user-manual/en/configuration-index.md#modularising-brokerxml] but providing an option to disable XML external entity processing would be useful for users that are not using that feature.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)