[midPoint-git] [Evolveum/midpoint] dd00e8: Fixes for XXE vulnerabilities (MID-5285)

Radovan Semancik noreply at github.com
Wed Apr 17 13:03:26 CEST 2019


  Branch: refs/heads/support-3.6
  Home:   https://github.com/Evolveum/midpoint
  Commit: dd00e848886fa164047c3edc335ecaabeaad960e
      https://github.com/Evolveum/midpoint/commit/dd00e848886fa164047c3edc335ecaabeaad960e
  Author: Radovan Semancik <radovan.semancik at evolveum.com>
  Date:   2019-04-17 (Wed, 17 Apr 2019)

  Changed paths:
    M infra/common/src/main/java/com/evolveum/midpoint/common/validator/Validator.java
    M infra/prism/src/main/java/com/evolveum/midpoint/prism/lex/dom/DomLexicalProcessor.java
    M infra/prism/src/main/java/com/evolveum/midpoint/prism/schema/SchemaToDomProcessor.java
    M infra/prism/src/test/java/com/evolveum/midpoint/prism/TestPrismParsingXml.java
    A infra/prism/src/test/resources/common/xml/user-jack-xxe.xml
    M infra/util/src/main/java/com/evolveum/midpoint/util/DOMUtil.java
    M model/model-client/src/main/java/com/evolveum/midpoint/model/client/ModelClientUtil.java

  Log Message:
  -----------
  Fixes for XXE vulnerabilities (MID-5285)




More information about the midPoint-svn mailing list