[jira] [Commented] (YARN-11330) Use secure XML parser utils in YARN

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/YARN-11330?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17613993#comment-17613993 ] 

ASF GitHub Bot commented on YARN-11330:
---------------------------------------

pjfanning commented on PR #4981:
URL: https://github.com/apache/hadoop/pull/4981#issuecomment-1271368458

   @steveloughran looks like I need to change the GpuParser code to allow DTDs. But I can add some of the secure settings. I'm testing a fix locally.
   
   The XML files parsed by this class look like:
   
   ```
   <?xml version="1.0" ?>
   
   <!DOCTYPE nvidia_smi_log SYSTEM "nvsmi_device_v8.dtd">
   
   <nvidia_smi_log>
       <timestamp>Wed Sep 6 21:52:51 2017</timestamp>
       <driver_version>375.66</driver_version>
       ...
   ```




> Use secure XML parser utils in YARN
> -----------------------------------
>
>                 Key: YARN-11330
>                 URL: https://issues.apache.org/jira/browse/YARN-11330
>             Project: Hadoop YARN
>          Issue Type: Improvement
>    Affects Versions: 3.3.4
>            Reporter: PJ Fanning
>            Assignee: PJ Fanning
>            Priority: Major
>              Labels: pull-request-available
>
> Uptakes HADOOP-18469



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org