[ 
https://issues.apache.org/jira/browse/TIKA-3164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17456755#comment-17456755
 ] 

Tim Allison commented on TIKA-3164:
-----------------------------------

All sounds good. Thank you, [~pj.fanning]. I’ll open issues and share files 
when I’m back to a keyboard.

In the external schema issue, two questions:
1) can we force xerces or, frankly, any specific implementation? We had issues 
before where users had different default xml parsing than I did and debugging 
was a pain, and we couldn’t guarantee consistency across platforms.
2) I see in the comments in the issue that the logging is benign. I wanted to 
confirm that we are not vulnerable to xxe. 

> Upgrade to POI 5.0.0 when available
> -----------------------------------
>
>                 Key: TIKA-3164
>                 URL: https://issues.apache.org/jira/browse/TIKA-3164
>             Project: Tika
>          Issue Type: Task
>            Reporter: Tim Allison
>            Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to