[
https://issues.apache.org/jira/browse/AMQ-9783?focusedWorklogId=986787&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-986787
]
ASF GitHub Bot logged work on AMQ-9783:
---------------------------------------
Author: ASF GitHub Bot
Created on: 10/Oct/25 23:47
Start Date: 10/Oct/25 23:47
Worklog Time Spent: 10m
Work Description: sergio-d-lemos opened a new pull request, #1508:
URL: https://github.com/apache/activemq/pull/1508
Centralize settings for DocumentBuilderFactory and TransformerFactory in a
single class, so we have a way to apply always the same security settings.
Unfortunately there is no single shared module, so I can't use XmlFactories
class in
https://github.com/apache/activemq/blob/main/activemq-client/src/main/java/org/apache/activemq/filter/XPathExpression.java
Sanity tested by using the `activemq create` and by running a broker with
the `runtimeConfigurationPlugin` plugin enabled.
Issue Time Tracking
-------------------
Worklog Id: (was: 986787)
Remaining Estimate: 0h
Time Spent: 10m
> Centralize XML Parsing configuration
> ------------------------------------
>
> Key: AMQ-9783
> URL: https://issues.apache.org/jira/browse/AMQ-9783
> Project: ActiveMQ Classic
> Issue Type: Improvement
> Components: Command Line Tools, Plugin
> Affects Versions: 5.x, 6.x
> Reporter: Sérgio Lemos
> Priority: Minor
> Time Spent: 10m
> Remaining Estimate: 0h
>
> I've noticed we have different places in the code where we configure XML
> security parsing features:
>
> [https://github.com/search?q=repo%3Aapache%2Factivemq%20disallow-doctype-decl&type=code]
>
> I propose we configure these settings in a single place, so its easier to
> manage them and ensure they are applied everywhere.
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
