]> git.basschouten.com Git - openhab-addons.git/commit
projects / openhab-addons.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5e1f24c) | patch
[dwdunwetter] Handle possible XXE injection (#15466)
authorHolger Friedrich <holgerfriedrich@users.noreply.github.com>
Tue, 29 Aug 2023 16:50:13 +0000 (18:50 +0200)
committerGitHub <noreply@github.com>
Tue, 29 Aug 2023 16:50:13 +0000 (18:50 +0200)
commitd3c07344d345c6b8e003f765ce687f9faea25202
treee3c0ac208f56cd8cab1b75e16d30d686b2accc70tree | snapshot
parent5e1f24c54fd21a85854265bdc27eb0e9236da1c7commit | diff
[dwdunwetter] Handle possible XXE injection (#15466)

XMLInputFactory: Disable properties IS_SUPPORTING_EXTERNAL_ENTITIES and
SUPPORT_DTD which allow injecting external entities.

Signed-off-by: Holger Friedrich <mail@holger-friedrich.de>
bundles/org.openhab.binding.dwdunwetter/src/main/java/org/openhab/binding/dwdunwetter/internal/dto/DwdWarningsData.java diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.