Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-18469

Add XMLUtils methods to centralise code that creates secure XML parsers

    XMLWordPrintableJSON

Details

    • Reviewed

    Description

      Relates to HDFS-16766

      There are other places in the code where DocumentBuilderFactory instances are created that could benefit from the same changes as HDFS-16766

      sonatype-2022-5820

      If anyone is landing on this page following the sonatype-2022-5820 alert, know that there is no known issue here, just a centralisation of all construction of XML parsers with lockdown of all the features.

      Attachments

        Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. HDFS-16795 Use secure XML parser utils in hdfs classes

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. MAPREDUCE-7411 Use secure XML parser utils in MapReduce

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. YARN-11330 Use secure XML parser utils in YARN

          • Major - Major loss of function.
          • Resolved

          Task - A task that needs to be done. HADOOP-18575 Make XML transformer factory more lenient

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HDFS-16766 hdfs ec command loads (administrator provided) erasure code policy files without disabling xml entity expansion

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #4940

          Web Link GitHub Pull Request #4978

          Activity

            People

              pj.fanning PJ Fanning
              pj.fanning PJ Fanning
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: