| Detector: | Findbugs |
| Target: | project ' odata4j ' version0.6 |
| Tags: |
Anomaly identified by the detector. Please review whether this anomaly corresponds to a misuse.
| Finding: | finding-3 |
| In File: | org/odata4j/stax2/domimpl/DomXMLFactoryProvider2.java |
| In Method: | createXMLEventReader(Reader) |
| Code with Finding: |
|
| Hit | Rank | Desc | Type | Violations |
|---|---|---|---|---|
| Yes |
3 |
SECXXEDOC: The use of DocumentBuilder.parse(...) is vulnerable to XML External Entity attacks |
XXE_DOCUMENT |
| Reviewer Name: | anna |
| : |
https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet |