[572885] Disable external resources access when rendering SVGs

See CVE-2019-17566:

    Apache Batik is vulnerable to server-side request forgery, caused
    by improper input validation by the "xlink:href" attributes. By
    using a specially-crafted argument, an attacker could exploit this
    vulnerability to cause the underlying server to make arbitrary GET
    requests.

Completely disable access to external resources when rendering SVG
images, at least for now.

Bug: https://bugs.eclipse.org/bugs/show_bug.cgi?id=572885
See-also: https://nvd.nist.gov/vuln/detail/CVE-2019-17566
Change-Id: I2a1e9e618e2f2e0db1a3a6b362b9631492334dc0
Signed-off-by: Pierre-Charles David <pierre-charles.david@obeo.fr>
1 file changed
tree: d84d3a0b081d0f399108841aaf661639872a78ad
  1. org.eclipse.gmf/
  2. org.eclipse.gmf.examples.runtime/
  3. org.eclipse.gmf.examples.runtime-feature/
  4. org.eclipse.gmf.examples.runtime.common.service/
  5. org.eclipse.gmf.examples.runtime.diagram.decorator/
  6. org.eclipse.gmf.examples.runtime.diagram.geoshapes/
  7. org.eclipse.gmf.examples.runtime.diagram.layout/
  8. org.eclipse.gmf.examples.runtime.diagram.logic/
  9. org.eclipse.gmf.examples.runtime.diagram.logic.model/
  10. org.eclipse.gmf.examples.runtime.diagram.logic.model.edit/
  11. org.eclipse.gmf.examples.runtime.diagram.logic.model.editor/
  12. org.eclipse.gmf.examples.runtime.emf.clipboard/
  13. org.eclipse.gmf.examples.runtime.ui.pde/
  14. org.eclipse.gmf.examples.runtime.ui.pde-feature/
  15. org.eclipse.gmf.runtime-feature/
  16. org.eclipse.gmf.runtime.common.core/
  17. org.eclipse.gmf.runtime.common.ui/
  18. org.eclipse.gmf.runtime.common.ui.action/
  19. org.eclipse.gmf.runtime.common.ui.action.ide/
  20. org.eclipse.gmf.runtime.common.ui.printing/
  21. org.eclipse.gmf.runtime.common.ui.printing.win32/
  22. org.eclipse.gmf.runtime.common.ui.services/
  23. org.eclipse.gmf.runtime.common.ui.services.action/
  24. org.eclipse.gmf.runtime.common.ui.services.dnd/
  25. org.eclipse.gmf.runtime.common.ui.services.dnd.ide/
  26. org.eclipse.gmf.runtime.common.ui.services.properties/
  27. org.eclipse.gmf.runtime.diagram.core/
  28. org.eclipse.gmf.runtime.diagram.ui/
  29. org.eclipse.gmf.runtime.diagram.ui.actions/
  30. org.eclipse.gmf.runtime.diagram.ui.dnd/
  31. org.eclipse.gmf.runtime.diagram.ui.geoshapes/
  32. org.eclipse.gmf.runtime.diagram.ui.printing/
  33. org.eclipse.gmf.runtime.diagram.ui.printing.render/
  34. org.eclipse.gmf.runtime.diagram.ui.properties/
  35. org.eclipse.gmf.runtime.diagram.ui.providers/
  36. org.eclipse.gmf.runtime.diagram.ui.providers.ide/
  37. org.eclipse.gmf.runtime.diagram.ui.render/
  38. org.eclipse.gmf.runtime.diagram.ui.resources.editor/
  39. org.eclipse.gmf.runtime.diagram.ui.resources.editor.ide/
  40. org.eclipse.gmf.runtime.draw2d.ui/
  41. org.eclipse.gmf.runtime.draw2d.ui.render/
  42. org.eclipse.gmf.runtime.draw2d.ui.render.awt/
  43. org.eclipse.gmf.runtime.emf.clipboard.core/
  44. org.eclipse.gmf.runtime.emf.commands.core/
  45. org.eclipse.gmf.runtime.emf.core/
  46. org.eclipse.gmf.runtime.emf.type.core/
  47. org.eclipse.gmf.runtime.emf.type.ui/
  48. org.eclipse.gmf.runtime.emf.ui/
  49. org.eclipse.gmf.runtime.emf.ui.properties/
  50. org.eclipse.gmf.runtime.gef.ui/
  51. org.eclipse.gmf.runtime.notation.providers/
  52. org.eclipse.gmf.runtime.releng/
  53. org.eclipse.gmf.runtime.repository/
  54. org.eclipse.gmf.runtime.sdk/
  55. org.eclipse.gmf.runtime.sdk-feature/
  56. org.eclipse.gmf.runtime.target/
  57. org.eclipse.gmf.runtime.thirdparty-feature/
  58. org.eclipse.gmf.runtime.thirdparty.source-feature/
  59. org.eclipse.gmf.source-feature/
  60. org.eclipse.gmf.tests.runtime-feature/
  61. org.eclipse.gmf.tests.runtime.common.core/
  62. org.eclipse.gmf.tests.runtime.common.ui/
  63. org.eclipse.gmf.tests.runtime.common.ui.services/
  64. org.eclipse.gmf.tests.runtime.common.ui.services.action/
  65. org.eclipse.gmf.tests.runtime.common.ui.services.provider/
  66. org.eclipse.gmf.tests.runtime.diagram.ui/
  67. org.eclipse.gmf.tests.runtime.draw2d.ui/
  68. org.eclipse.gmf.tests.runtime.draw2d.ui.render/
  69. org.eclipse.gmf.tests.runtime.emf.clipboard.core/
  70. org.eclipse.gmf.tests.runtime.emf.commands.core/
  71. org.eclipse.gmf.tests.runtime.emf.core/
  72. org.eclipse.gmf.tests.runtime.emf.type.core/
  73. org.eclipse.gmf.tests.runtime.emf.type.ui/
  74. org.eclipse.gmf.tests.runtime.emf.ui/
  75. org.eclipse.gmf.tests.runtime.emf.ui.properties/
  76. org.eclipse.gmf.tests.runtime.gef.ui/
  77. CONTRIBUTING.md
  78. LICENSE
  79. pom.xml