diff options
| author | kstranacher <kstranacher@d688527b-c9ab-4aba-bd8d-4036d912da1d> | 2011-08-31 14:45:52 +0000 |
|---|---|---|
| committer | kstranacher <kstranacher@d688527b-c9ab-4aba-bd8d-4036d912da1d> | 2011-08-31 14:45:52 +0000 |
| commit | 9b0b76abd6bdd88383e465117086d65268c25562 (patch) | |
| tree | 2f53d26ff63352dbe0dcfe077cb2add2e2c375d6 /spss/server/serverlib | |
| parent | 09cc9a356b945822ba5d8e939c30ca104967d278 (diff) | |
| download | moa-id-spss-9b0b76abd6bdd88383e465117086d65268c25562.tar.gz moa-id-spss-9b0b76abd6bdd88383e465117086d65268c25562.tar.bz2 moa-id-spss-9b0b76abd6bdd88383e465117086d65268c25562.zip | |
Update Axis-Lib von 1.0 auf 1.1 aufgrund XXE (Xml eXternal Entity) Injection
git-svn-id: https://joinup.ec.europa.eu/svn/moa-idspss/trunk@1214 d688527b-c9ab-4aba-bd8d-4036d912da1d
Diffstat (limited to 'spss/server/serverlib')
| -rw-r--r-- | spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/server/service/AxisHandler.java | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/server/service/AxisHandler.java b/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/server/service/AxisHandler.java index cfe8d327a..8a48cc755 100644 --- a/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/server/service/AxisHandler.java +++ b/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/server/service/AxisHandler.java @@ -140,6 +140,7 @@ public class AxisHandler extends BasicHandler { ConfigurationProvider.getInstance(); Element xmlRequest = null; + //log.info(soapMessage.getSOAPPartAsString()); Element soapPart = DOMUtils.parseDocument(new ByteArrayInputStream(soapMessage.getSOAPPartAsBytes()), false, null, null).getDocumentElement(); if (soapPart!=null) { //TODO: check if DOM Version is intolerant when white spaces are between tags (preceding normalization would be necessary) |