[ 
https://issues.apache.org/jira/browse/CAMEL-8312?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Christian Müller updated CAMEL-8312:
------------------------------------
    Fix Version/s:     (was: 2.14.3)
                   2.14.2

> XML External Entity (XXE) issue in XPath
> ----------------------------------------
>
>                 Key: CAMEL-8312
>                 URL: https://issues.apache.org/jira/browse/CAMEL-8312
>             Project: Camel
>          Issue Type: Improvement
>          Components: camel-core
>    Affects Versions: 2.13.3, 2.14.1
>            Reporter: Stephan Siano
>            Assignee: Claus Ibsen
>             Fix For: 2.13.4, 2.14.2, 2.15.0
>
>
> If the documentType of an XPath expression is set to a class for that no type 
> converter exists and the data to which the expression is applied is of type 
> WrappedFile or String the XPath will seem to work anyway. However this setup 
> will create issues by using an InputSource created from the String or Generic 
> file.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to