Versions Compared

Old Version 1

changes.mady.by.user Unknown User (lukaszlenart)

Saved on

compared with

New Version Current

changes.mady.by.user Unknown User (lukaszlenart)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Users unable to upgrade immediately can mitigate XXE either by either:

  • Custom using a custom SAXParserFactory: set -Dxworkset xwork.saxParserFactory=  to a custom factory class that disables external entities by default

or

  • defining JVM-level configuration: configure the JVM's default XML parser to disable external entities via system properties (set to empty string to block all protocols):

...