XML import should not access external entities
----------------------------------------------
Key: JCR-1355
URL: https://issues.apache.org/jira/browse/JCR-1355
Project: Jackrabbit
Issue Type: Bug
Components: xml
Affects Versions: 1.4, 1.3.3, 1.3.1, 1.3, 1.2.3, 1.2.2, 1.2.1, 1.1.1, 1.1,
1.0.1, 1.0, 0.9
Reporter: Jukka Zitting
Assignee: Jukka Zitting
Priority: Minor
Fix For: 1.4.1
With current Jackrabbit the following XML document can not be imported:
<!DOCTYPE foo SYSTEM "http://invalid.address/";><foo/>
Even if the DTD address (or some other external resource referenced in the XML
document) is correct, I don't think importXML() should even try resolving those
references.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
