You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@logging.apache.org by "Mikael Ståldal (JIRA)" <ji...@apache.org> on 2017/09/16 19:52:00 UTC

[jira] [Closed] (LOG4J2-1959) Disable DTD processing in XML configuration files

     [ https://issues.apache.org/jira/browse/LOG4J2-1959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mikael Ståldal closed LOG4J2-1959.
----------------------------------

> Disable DTD processing in XML configuration files
> -------------------------------------------------
>
>                 Key: LOG4J2-1959
>                 URL: https://issues.apache.org/jira/browse/LOG4J2-1959
>             Project: Log4j 2
>          Issue Type: Improvement
>          Components: Configurators
>    Affects Versions: 2.8.2
>            Reporter: Mikael Ståldal
>            Assignee: Mikael Ståldal
>             Fix For: 2.9.0
>
>
> For security reasons, DTD processing should be disabled when parsing XML configuration files.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)