Lock down JAXB. Don't load remote entities.
XML is subject to XXE attacks. https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet#JAXB_Unmarshaller
Showing
想要评论请 注册 或 登录
从无法访问的项目Fork
XML is subject to XXE attacks. https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet#JAXB_Unmarshaller