[jira] [Commented] (ARTEMIS-4077) Add an option to disable XML external entity processing

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ARTEMIS-4077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17634421#comment-17634421 ] 

ASF subversion and git services commented on ARTEMIS-4077:
----------------------------------------------------------

Commit 3a13a7850cf2cd73a3ad276ac4c05f9b04580646 in activemq-artemis's branch refs/heads/main from Domenico Francesco Bruscino
[ https://gitbox.apache.org/repos/asf?p=activemq-artemis.git;h=3a13a7850c ]

ARTEMIS-4077 Add an option to disable XML external entity processing


> Add an option to disable XML external entity processing
> -------------------------------------------------------
>
>                 Key: ARTEMIS-4077
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-4077
>             Project: ActiveMQ Artemis
>          Issue Type: Improvement
>            Reporter: Domenico Francesco Bruscino
>            Assignee: Domenico Francesco Bruscino
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Processing XML external entities when it isn't needed exposes the system to unnecessary risks. ActiveMQ Artemis is using xml include to support [modularising broker.xml|https://github.com/apache/activemq-artemis/blob/main/docs/user-manual/en/configuration-index.md#modularising-brokerxml] but providing an option to disable XML external entity processing would be useful for users that are not using that feature.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)