NIFI-6301 - Added a SafeXMLConfiguration which disables XML DTDs whic…#3507

Closed

thenatog wants to merge 7 commits intoapache:masterfrom

thenatog:NIFI-6301-rebased

Commits on Jun 11, 2019

NIFI-6301 - Added a SafeXMLConfiguration which disables XML DTDs which may call external entities.
thenatog
committed
NIFI-6301 - Added an XXE Validator to do a simple regex check on files that contain XXE declarations. Added unit tests and related XML test files.
thenatog
committed
NIFI-6301 - Forgot license headers. Fixed a unit test.
thenatog
committed
NIFI-6301 Refactored duplicate code for error handling.

alopresto
authored and
thenatog
committed
NIFI-6301 - Removed unused imports.
thenatog
committed
NIFI-6301 Slightly changed messaging language.

alopresto
authored and
thenatog
committed
NIFI-6301 Added logic to catch multiline XXE attacks.

alopresto
authored and
thenatog
committed