Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix importer vulnerability #4240

Merged
merged 6 commits into from
Jul 30, 2018
Merged

Commits on Jul 29, 2018

  1. Fix importer vulnerability

    Fixed issue JabRef#4229  where importer was vulnerable to XXE attacks by
    disabling DTDs along with adding warning to logger if features are
    unavailable. fixes JabRef#4229
    nicksw committed Jul 29, 2018
    Configuration menu
    Copy the full SHA
    57d3a8a View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    7226483 View commit details
    Browse the repository at this point in the history

Commits on Jul 30, 2018

  1. Fix minor code errors and logger optimization

    Removed author line in class comment. Reworded CHANGLOG.md. Set
    DTD features to individual final static constants. Optimized
    logger by parameterizing feature and error.
    nicksw committed Jul 30, 2018
    Configuration menu
    Copy the full SHA
    87a7682 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    66396a0 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    11da233 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    cd3dd60 View commit details
    Browse the repository at this point in the history