hapifhir / hapi-hl7v2

277 stars 138 forks source link

Fix XXE issue in XML parser #98

Closed jamesagnew closed 1 year ago

jamesagnew commented 1 year ago

This PR corrects an XXE issue reported in the HL7 XML parser. Previously, when parsing XML based HL7v2 messages, it was possible for an external directive to cause the parser to leak data from the local disk.