Colm O hEigeartaigh created AMQ-7110:
----------------------------------------

             Summary: Enable secure processing on all 
DocumentBuilderFactory.newInstance()
                 Key: AMQ-7110
                 URL: https://issues.apache.org/jira/browse/AMQ-7110
             Project: ActiveMQ
          Issue Type: Task
            Reporter: Colm O hEigeartaigh
             Fix For: 5.16.0


Good security practices say that all DocumentBuilderFactory instances should 
enable the secure processing feature and disable doctypes to avoid XXE attacks.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to