Skip to content

CodeQL: Disable external XML parsing in kmip-client #59

@mp-jpl

Description

@mp-jpl

CodeQL complains about use of XML parsing without disabling external document reading in:
kmip-client/src/main/java/ch/ntb/inf/kmip/config/ContextProperties.java

public void decode() {
SAXReader xmlReader = new SAXReader();
xmlReader.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true); -- add this line
}

Metadata

Metadata

Assignees

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions