search

SmartDroidDeveloper / google-api-java-client

Automatically exported from code.google.com/p/google-api-java-client
0 stars 0 forks source link

Secure XML parser #64

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
External references, such as a standards document, or specification?

http://www.google.com/codesearch/p?hl=en#EOYaOg_yTgg/trunk/java/src/com/google/g
data/util/common/xml/parsing/SecureGenericXMLFactory.java&q=SecureGenericXMLFact
ory%20package:http://gdata-java-client%5C.googlecode%5C.com&sa=N&cd=1&ct=rc

Java environments (e.g. Java 6, Android 2.2, App Engine 1.3.7, or All)?

All.

Please describe the feature requested.

We need to make our XML parser secure.  Note that there are problems with this 
implementation when running on Android.

Original issue reported on code.google.com by yan...@google.com on 12 Nov 2010 at 2:11

GoogleCodeExporter commented 9 years ago

Original comment by yan...@google.com on 21 Dec 2010 at 12:35

GoogleCodeExporter commented 9 years ago

Original comment by yan...@google.com on 7 Jan 2011 at 3:29

GoogleCodeExporter commented 9 years ago

Original comment by yan...@google.com on 8 Jan 2011 at 6:26

GoogleCodeExporter commented 9 years ago 
Doesn't seem applicable because the code above is for securing 
SAXParserFactory.  None of these settings seem to be available for 
XmlPullParser as far as I can tell.

Original comment by yan...@google.com on 31 Jan 2011 at 9:51