mirror of
https://github.com/spring-projects/spring-framework.git
synced 2026-09-23 22:59:03 +00:00
Arjen Poutsma
434735fbf6
Disable by default external entity resolution when using Spring OXM
with jaxb. This prevents a XML entity from being able to resolve a
local file on the host system.
See:
https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing
Issue: SPR-10806
(cherry picked from commit 7576274)