[jira] [Resolved] (FALCON-2273) Disallow external entity injection and clean up some log messages

["Pallavi Rao (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FALCON-2273?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pallavi Rao resolved FALCON-2273.
---------------------------------
       Resolution: Fixed
    Fix Version/s: 0.11
                   trunk

Issue resolved by pull request 357
[https://github.com/apache/falcon/pull/357]

> Disallow external entity injection and clean up some log messages
> -----------------------------------------------------------------
>
>                 Key: FALCON-2273
>                 URL: https://issues.apache.org/jira/browse/FALCON-2273
>             Project: Falcon
>          Issue Type: Bug
>          Components: general
>    Affects Versions: trunk, 0.10
>            Reporter: Venkat Ranganathan
>            Assignee: Venkat Ranganathan
>             Fix For: trunk, 0.11
>
>
> While reviewing the Falcon code, it was found that there is a potential for an external entity to be injected during XML entity parsing.
> Also in the data source entity parsing, we would like to avoid the location of the credential files which can be potentially used for exploiting



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)