You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2018/11/22 14:50:00 UTC

[jira] [Created] (AMQ-7110) Enable secure processing on all DocumentBuilderFactory.newInstance()

Colm O hEigeartaigh created AMQ-7110:
----------------------------------------

             Summary: Enable secure processing on all DocumentBuilderFactory.newInstance()
                 Key: AMQ-7110
                 URL: https://issues.apache.org/jira/browse/AMQ-7110
             Project: ActiveMQ
          Issue Type: Task
            Reporter: Colm O hEigeartaigh
             Fix For: 5.16.0


Good security practices say that all DocumentBuilderFactory instances should enable the secure processing feature and disable doctypes to avoid XXE attacks.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)