cloudstack/utils/src
Rohit Yadav 19c194c0e1 saml: Safer DocumentBuilderFactory and ParserPool configuration
This implements safer DocumentBuilderFactory and ParserPool utilities
to be used throughout the codebase to prevent potential XXE exploits.

References:
https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html
https://www.blackhat.com/docs/us-15/materials/us-15-Wang-FileCry-The-New-Age-Of-XXE-java-wp.pdf

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 0c6b92142cc402c3eebf9bf4aa3c77b2d9defc69)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2022-07-12 18:45:36 +05:30
..
main saml: Safer DocumentBuilderFactory and ParserPool configuration 2022-07-12 18:45:36 +05:30
test SystemVM optimizations (#5831) 2022-04-21 13:40:19 -03:00