tree f6df7429532793e4b56631a512511746172ef3e8
parent 6ab4441a4442b39f8e06608299ad0d894276a873
author Brian de Alwis <bsd@mt.ca> 1504122476 -0400
committer Thomas Watson <tjwatson@us.ibm.com> 1504702765 -0500

Bug 518031 - XML External Entity Vulnerability in Eclipse IDE

Ensure XML processors are configured to use
XMLConstants.FEATURE_SECURE_PROCESSING=true
to avoid accessing external DTDs and expanding external entities.

(Backport to 4.7)

Change-Id: Icabb6e0d55dd546a66ad506cde7e24a996484f1a
Signed-off-by: Brian de Alwis <bsd@mt.ca>
Signed-off-by: Thomas Watson <tjwatson@us.ibm.com>