mocca, branch mocca-1.3.27 Modular Open Citizen Card Architecture https://git.egiz.gv.at/mocca/atom?h=mocca-1.3.27 2017-06-23T12:56:00+00:00 [maven-release-plugin] prepare release mocca-1.3.27 2017-06-23T12:56:00+00:00 bschnalzer bianca.schnalzer@egiz.gv.at 2017-06-23T12:56:00+00:00 urn:sha1:db4c0503f90dedb3311d551d94115d206c0ad145 Merge branch 'manuell_XXE_and_SSRF_validation' into 'master' 2017-06-23T10:08:06+00:00 Bianca Schnalzer bianca.schnalzer@egiz.gv.at 2017-06-23T10:08:06+00:00 urn:sha1:08ce5e1262d7b115e0350e445de97c78f9f4c597 Manuell xxe and ssrf validation fix another possible XXE, SSRF problem. 2017-06-23T09:58:29+00:00 Thomas Lenz thomas.lenz@egiz.gv.at 2017-06-23T09:58:29+00:00 urn:sha1:bbe653345bbb5dad2ed2356df6f817dd7de26528 INFO: DocTypes are disabled by default for all XML content that should be signed with mocca!!! Consequently, XML and XAdES signatures for XML documents that contains a DocType declaration is not possible any more. If DocType declarations are absolutely necessary than this feature can be skipped by set the Java System-Property "-Degiz.mocca.xades.xml.allow.doctype=true" Merge branch 'manuell_XXE_and_SSRF_validation' into 'master' 2017-06-23T08:05:35+00:00 Bianca Schnalzer bianca.schnalzer@egiz.gv.at 2017-06-23T08:05:35+00:00 urn:sha1:2b395988ade78c58e6feaf55bd6ec129cf5f8e6f Manuell xxe and ssrf validation some small refactoring and code documentation 2017-06-23T04:50:14+00:00 Thomas Lenz thomas.lenz@egiz.gv.at 2017-06-23T04:50:14+00:00 urn:sha1:0603c0fbdfe028113431c65590b6e7e28929f6f6 update jUnit test do validate XXE prevention in Signed data viewer 2017-06-22T12:56:15+00:00 Thomas Lenz thomas.lenz@egiz.gv.at 2017-06-22T12:56:15+00:00 urn:sha1:d840a372f84518c4026efd3d463cfcffac930e46 implement a workaround to fix XXE and SSRF problems in an old XMLStreamParser implementation of a third party library 2017-06-22T12:26:15+00:00 Thomas Lenz thomas.lenz@egiz.gv.at 2017-06-22T12:26:15+00:00 urn:sha1:345a8534ff39cc9550cbacabe2b3fffe20293508 [maven-release-plugin] prepare for next development iteration 2017-05-29T14:04:33+00:00 bschnalzer bianca.schnalzer@egiz.gv.at 2017-05-29T14:04:33+00:00 urn:sha1:f31c5c8e557b611ff4f5e43443975fb08a202863 [maven-release-plugin] prepare release mocca-1.3.26 2017-05-29T14:04:29+00:00 bschnalzer bianca.schnalzer@egiz.gv.at 2017-05-29T14:04:29+00:00 urn:sha1:f77386eafaa440c4497d7cd3c607bdd8ff0722bb Card-Update 2017-05-29T13:24:47+00:00 bschnalzer bianca.schnalzer@egiz.gv.at 2017-05-29T13:24:47+00:00 urn:sha1:c7d1fefc3d28ff1c53a4d6f18410d667a265e42c