You are viewing a plain text version of this content. The canonical link for it is here.

Posted to soap-dev@ws.apache.org by Sanjiva Weerawarana <sa...@opensource.lk> on 2005/09/17 05:22:05 UTC

Re: svn commit: r289557 - /webservices/soap/trunk/java/src/org/apache/soap/util/xml/XMLParserUtils.java

Hi Dims,

On Fri, 2005-09-16 at 14:22 +0000, dims@apache.org wrote:
> Author: dims
> Date: Fri Sep 16 07:21:58 2005
> New Revision: 289557
> 
> URL: http://svn.apache.org/viewcvs?rev=289557&view=rev
> Log:
> switch off various parser options to prevent XXE attacks.

XXE?

You seem to be turning off many SAX options .. Apache SOAP as you know
only uses DOM. ??

Sanjiva.