[
https://issues.apache.org/jira/browse/FALCON-2273?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pallavi Rao resolved FALCON-2273.
---------------------------------
Resolution: Fixed
Fix Version/s: 0.11
trunk
Issue resolved by pull request 357
[https://github.com/apache/falcon/pull/357]
> Disallow external entity injection and clean up some log messages
> -----------------------------------------------------------------
>
> Key: FALCON-2273
> URL: https://issues.apache.org/jira/browse/FALCON-2273
> Project: Falcon
> Issue Type: Bug
> Components: general
> Affects Versions: trunk, 0.10
> Reporter: Venkat Ranganathan
> Assignee: Venkat Ranganathan
> Fix For: trunk, 0.11
>
>
> While reviewing the Falcon code, it was found that there is a potential for
> an external entity to be injected during XML entity parsing.
> Also in the data source entity parsing, we would like to avoid the location
> of the credential files which can be potentially used for exploiting
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
