spring-framework

Spring Framework

Tree: effe606b28

Brian Clozel f204f4962d Document XML parser usage against security false positives Prior to this commit, our XML parser usage would be already haredened against XXE (XML External Entities) attacks. Still, we recently received several invalid security reports claiming that our setup should be hardened. This commit documents a few usages of XML parsers to add some more context and hopefully prevent future invalid reports. Closes gh-33713	1 year ago
..
main	Document XML parser usage against security false positives	1 year ago
test	Merge branch '6.1.x'	2 years ago

Brian Clozel f204f4962d Document XML parser usage against security false positives

Prior to this commit, our XML parser usage would be already haredened
against XXE (XML External Entities) attacks. Still, we recently received
several invalid security reports claiming that our setup should be
hardened.

This commit documents a few usages of XML parsers to add some more
context and hopefully prevent future invalid reports.

Closes gh-33713

1 year ago

main

Document XML parser usage against security false positives

1 year ago

test

Merge branch '6.1.x'

2 years ago