mirror of
https://codeberg.org/Mercury-IM/Smack
synced 2025-12-05 04:31:07 +01:00
Before that, the StAX parser used by Smack for XML parsing had only external entity replacement disabled. We further harden the parser by disabling DTDs. See also: https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#xmlinputfactory-a-stax-parser |
||
|---|---|---|
| .. | ||
| main | ||
| test/java/org/jivesoftware/smack/xml/stax | ||