[
https://issues.apache.org/jira/browse/ARTEMIS-4077?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Justin Bertram resolved ARTEMIS-4077.
-------------------------------------
Fix Version/s: 2.28.0
Resolution: Fixed
> Add an option to disable XML external entity processing
> -------------------------------------------------------
>
> Key: ARTEMIS-4077
> URL: https://issues.apache.org/jira/browse/ARTEMIS-4077
> Project: ActiveMQ Artemis
> Issue Type: Improvement
> Reporter: Domenico Francesco Bruscino
> Assignee: Domenico Francesco Bruscino
> Priority: Major
> Fix For: 2.28.0
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Processing XML external entities when it isn't needed exposes the system to
> unnecessary risks. ActiveMQ Artemis is using xml include to support
> [modularising
> broker.xml|https://github.com/apache/activemq-artemis/blob/main/docs/user-manual/en/configuration-index.md#modularising-brokerxml]
> but providing an option to disable XML external entity processing would be
> useful for users that are not using that feature.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
