AFAICT XML support is not a standard part of Dropwizard, and it's unclear what is meant by "DOCTYPE already inside DropWizard." Have you added something to your application to support parsing inbound XML?
On Friday, July 26, 2019 at 3:31:38 AM UTC-4, Harrie Hazewinkel wrote: > > Hello all, > > Is there a way to avoid an XXE attack? > > I am basically looking for configuration options to prevent > processing of the DOCTYPE already inside DropWizard. > > > regards, > Harrie > -- You received this message because you are subscribed to the Google Groups "dropwizard-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to dropwizard-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dropwizard-dev/3b1ec8df-d589-4d97-b0d2-982fc403ccee%40googlegroups.com.
