This repository has been archived by the owner on Mar 26, 2024. It is now read-only.

Missing XML Validation #39

Open

QiAnXinCodeSafe opened this issue Jan 21, 2020 · 0 comments

QiAnXinCodeSafe commented Jan 21, 2020

ccl-testing/cerreal-maven-plugin/src/main/java/com/cerner/ccl/testing/xsl/XslAPI.java

Line 133 in e62f1f8

    
           return domFactory.newDocumentBuilder().parse(IOUtils.toInputStream(xml, "utf-8"));

Failure to enable validation when parsing XML gives an attacker the opportunity to supply malicious input.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.