Skip to Content.
Sympa Menu

xom-interest - [XOM-interest] secure parsing

xom-interest AT lists.ibiblio.org

Subject: XOM API for Processing XML with Java

List archive

Chronological Thread  
  • From: Mike Wilson <mikewse AT hotmail.com>
  • To: <xom-interest AT lists.ibiblio.org>
  • Subject: [XOM-interest] secure parsing
  • Date: Tue, 16 Sep 2014 11:06:06 +0200

[resending as subscriber]

Hi,

We are using XOM to communicate XML over the internet and need to protect
ourselves from XML hacks such as mentioned on:
<https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing>
https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing

What is the most straight-forward way to configure XOM to achieve this?

Currently we are just doing:
Builder builder = new Builder();
Document doc = builder.build(new StringReader(xmlstr));

Thanks
Mike




Archive powered by MHonArc 2.6.24.

Top of Page