[
https://issues.apache.org/jira/browse/OFBIZ-12920?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17822847#comment-17822847
]
Jacques Le Roux commented on OFBIZ-12920:
-----------------------------------------
At https://www.pdflib.com/pdf-knowledge-base/zugferd-and-factur-x/ I read
bq. While only a single XML invoice attachment is allowed in ZUGFeRD,
additional attachments for other purposes may also be embedded. For example,
spreadsheets, CAD drawings, images or other files can be embedded which are
related to the invoice or may be relevant for invoice verification.
So it's seems easy, just allow a "single XML invoice attachment". W also need
to guarantee this file does not contain a XXE. Using
UtilXml::readXmlDocument(String content) should do it.
Johannes, as you proposed I let you handle it. I agree with Pierre, another
JIra issue should be created
> Allow uploading ZUGFeRD compliant pdf files
> -------------------------------------------
>
> Key: OFBIZ-12920
> URL: https://issues.apache.org/jira/browse/OFBIZ-12920
> Project: OFBiz
> Issue Type: Improvement
> Components: framework/security
> Affects Versions: Upcoming Branch
> Reporter: originalnichtskoenner
> Assignee: Jacques Le Roux
> Priority: Minor
> Fix For: Upcoming Branch
>
> Attachments: invalid_sample_invoice.pdf, sample_invoice.pdf
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
