Code Review / yangtools.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 848384a) | patch
Do not trust documents in anyxml 76/53176/2
authorRobert Varga <rovarga@cisco.com>
Sat, 11 Mar 2017 16:48:36 +0000 (17:48 +0100)
committerRobert Varga <nite@hq.sk>
Sat, 11 Mar 2017 18:48:36 +0000 (18:48 +0000)
commit5be6a8321f18389f594bbdf206a340731170254b
tree7cb797510a6d5eec0e1cdd2f36b08447bc4bb407tree | snapshot
parent848384ab7d023bd1d65865a4babfa515302e6d1ccommit | diff
Do not trust documents in anyxml

Parsing XMLs in anyxml is an untrusted operation, as they can
include various references to outside world. Fix this by using
a DocumentBuilder from UntrustedXML.

Change-Id: If212d5cc9629d415c7d22aba7d691215644a8669
Signed-off-by: Robert Varga <rovarga@cisco.com>
yang/yang-data-codec-xml/src/main/java/org/opendaylight/yangtools/yang/data/codec/xml/XmlParserStream.java diff | blob | history
OpenDaylight YANG Tools