[
https://issues.apache.org/jira/browse/TIKA-4769?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18094588#comment-18094588
]
Hudson commented on TIKA-4769:
------------------------------
SUCCESS: Integrated in Jenkins build Tika ยป tika-main-jdk17 #1461 (See
[https://ci-builds.apache.org/job/Tika/job/tika-main-jdk17/1461/])
TIKA-4769 - improve metadata robustness (#2923) (github:
[https://github.com/apache/tika/commit/3ae604cb5179b0fbed71dd5ec2b6b4479f45a9ca])
* (edit)
tika-parsers/tika-parsers-extended/tika-parser-scientific-module/src/test/java/org/apache/tika/parser/netcdf/NetCDFParserTest.java
* (edit)
tika-parsers/tika-parsers-ml/tika-inference/src/test/java/org/apache/tika/inference/OpenAIEmbeddingFilterTest.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module/src/main/java/org/apache/tika/parser/ogg/OggAudioParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-code-module/src/test/java/org/apache/tika/parser/mat/MatParserTest.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-miscoffice-module/src/test/java/org/apache/tika/parser/mif/MIFParserTest.java
* (edit)
tika-core/src/main/java/org/apache/tika/metadata/filter/CompositeMetadataFilter.java
* (edit)
tika-parsers/tika-parsers-extended/tika-parser-scientific-module/src/test/java/org/apache/tika/parser/hdf/HDFParserTest.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-cad-module/src/main/java/org/apache/tika/parser/dwg/DWGReadParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-code-module/src/main/java/org/apache/tika/parser/mat/MatParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-apple-module/src/main/java/org/apache/tika/parser/iwork/NumbersContentHandler.java
* (edit) tika-core/src/main/java/org/apache/tika/parser/CompositeParser.java
* (edit)
tika-core/src/main/java/org/apache/tika/metadata/filter/MetadataFilterBase.java
* (edit)
tika-parsers/tika-parsers-ml/tika-inference/src/test/java/org/apache/tika/inference/JinaEmbeddingFilterTest.java
* (edit) tika-core/src/main/java/org/apache/tika/metadata/filter/NoOpFilter.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module/src/test/java/org/apache/tika/parser/video/FLVParserTest.java
* (edit)
tika-pipes/tika-pipes-integration-tests/src/test/java/org/apache/tika/metadata/filter/AttachmentCountingListFilter.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-microsoft-module/src/test/java/org/apache/tika/parser/microsoft/rtf/jflex/RTFEmbeddedHandlerTest.java
* (edit)
tika-core/src/main/java/org/apache/tika/metadata/filter/RemoveByMimeMetadataFilter.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module/src/main/java/org/apache/tika/parser/video/FLVParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-font-module/src/test/java/org/apache/tika/parser/font/FontParsersTest.java
* (edit) tika-core/src/main/java/org/apache/tika/digest/InputStreamDigester.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module/src/test/java/org/apache/tika/parser/audio/AudioParserTest.java
* (add)
tika-core/src/test/java/org/apache/tika/metadata/MetadataInternalKeyGuardTest.java
* (edit)
tika-parsers/tika-parsers-ml/tika-parser-nlp-module/src/main/java/org/apache/tika/parser/journal/GrobidRESTParser.java
* (edit)
tika-serialization/src/main/java/org/apache/tika/serialization/serdes/MetadataDeserializer.java
* (edit) tika-core/src/main/java/org/apache/tika/utils/ParserUtils.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-miscoffice-module/src/main/java/org/apache/tika/parser/mif/MIFContentHandler.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-font-module/src/main/java/org/apache/tika/parser/font/TrueTypeParser.java
* (edit) tika-core/src/main/java/org/apache/tika/metadata/Metadata.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module/src/test/java/org/apache/tika/parser/mp3/Mp3ParserTest.java
* (edit)
tika-serialization/src/test/java/org/apache/tika/serialization/JsonMetadataTest.java
* (edit)
tika-serialization/src/test/java/org/apache/tika/serialization/CustomClassSerializationTest.java
* (edit)
tika-serialization/src/test/java/org/apache/tika/metadata/filter/AttachmentCountingListFilter.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-miscoffice-module/src/main/java/org/apache/tika/parser/indesign/IDMLParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-miscoffice-module/src/test/java/org/apache/tika/parser/indesign/IDMLParserTest.java
* (edit)
tika-parsers/tika-parsers-ml/tika-parser-nlp-module/src/main/java/org/apache/tika/parser/geo/topic/GeoParser.java
* (edit)
tika-parsers/tika-parsers-extended/tika-parser-scientific-module/src/main/java/org/apache/tika/parser/geoinfo/GeographicInformationParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module/src/main/java/org/apache/tika/parser/audio/AudioParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module/src/main/java/org/apache/tika/parser/mp3/Mp3Parser.java
* (edit)
tika-pipes/tika-pipes-core/src/main/java/org/apache/tika/pipes/core/serialization/FetchEmitTupleDeserializer.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-pdf-module/src/main/java/org/apache/tika/parser/pdf/PDMetadataExtractor.java
* (edit)
tika-core/src/main/java/org/apache/tika/parser/multiple/AbstractMultipleParser.java
* (edit)
tika-parsers/tika-parsers-extended/tika-parser-scientific-module/src/main/java/org/apache/tika/parser/netcdf/NetCDFParser.java
* (edit)
tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-apple-module/src/main/java/org/apache/tika/parser/iwork/PagesContentHandler.java
* (edit)
tika-parsers/tika-parsers-ml/tika-inference/src/main/java/org/apache/tika/inference/AbstractEmbeddingFilter.java
* (edit)
tika-core/src/main/java/org/apache/tika/metadata/filter/MetadataFilter.java
* (edit)
tika-parsers/tika-parsers-extended/tika-parser-scientific-module/src/main/java/org/apache/tika/parser/grib/GribParser.java
* (edit)
tika-parsers/tika-parsers-extended/tika-parser-scientific-module/src/main/java/org/apache/tika/parser/hdf/HDFParser.java
* (edit)
tika-pipes/tika-pipes-core/src/main/java/org/apache/tika/pipes/core/server/EmitHandler.java
> Add checks on String based metadata keys to prevent overwrites
> --------------------------------------------------------------
>
> Key: TIKA-4769
> URL: https://issues.apache.org/jira/browse/TIKA-4769
> Project: Tika
> Issue Type: Task
> Reporter: Tim Allison
> Priority: Minor
>
> If a parser is not written carefully, malicious user data could overwrite
> control-plane metadata. We should add guards in Metadata to check that
> TikaCoreProperties are not being overwritten by string keys.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
