falcon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Pallavi Rao (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (FALCON-2273) Disallow external entity injection and clean up some log messages
Date Thu, 09 Feb 2017 04:25:41 GMT

     [ https://issues.apache.org/jira/browse/FALCON-2273?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Pallavi Rao resolved FALCON-2273.
---------------------------------
       Resolution: Fixed
    Fix Version/s: 0.11
                   trunk

Issue resolved by pull request 357
[https://github.com/apache/falcon/pull/357]

> Disallow external entity injection and clean up some log messages
> -----------------------------------------------------------------
>
>                 Key: FALCON-2273
>                 URL: https://issues.apache.org/jira/browse/FALCON-2273
>             Project: Falcon
>          Issue Type: Bug
>          Components: general
>    Affects Versions: trunk, 0.10
>            Reporter: Venkat Ranganathan
>            Assignee: Venkat Ranganathan
>             Fix For: trunk, 0.11
>
>
> While reviewing the Falcon code, it was found that there is a potential for an external
entity to be injected during XML entity parsing.
> Also in the data source entity parsing, we would like to avoid the location of the credential
files which can be potentially used for exploiting



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message