Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Protect JSONML from stack overflow exceptions caused by recursion #723

Merged
merged 5 commits into from
Feb 17, 2023
Merged

Protect JSONML from stack overflow exceptions caused by recursion #723

merged 5 commits into from
Feb 17, 2023

Commits on Feb 10, 2023

  1. fix: amend XMLParserConfiguration.clone() to include the new maxNesti… 

    …ngDepth param.

Amend Javadoc for XML and XMLParserConfiguration classes.
    @TamasPergerDWP
    TamasPergerDWP committed Feb 10, 2023
    Configuration menu
    Copy the full SHA
    2391d24 View commit details
    Browse the repository at this point in the history

  2. fix: limit the nesting depth in JSONML 

    Limit the XML nesting depth for CVE-2022-45688 when using the JsonML transform.
    @TamasPergerDWP
    TamasPergerDWP committed Feb 10, 2023
    Configuration menu
    Copy the full SHA
    a6e412b View commit details
    Browse the repository at this point in the history

Commits on Feb 11, 2023

  1. fix: introduce optional XMLtoJSONMLParserConfiguration parameter for … 

    …JSONML.toJSONArray(...) functions, to facilitate max nesting depth override.
    @TamasPergerDWP
    TamasPergerDWP committed Feb 11, 2023
    Configuration menu
    Copy the full SHA
    df2d6f8 View commit details
    Browse the repository at this point in the history

Commits on Feb 12, 2023

  1. refactor: rename XMLtoJSONMLParserConfiguration to JSONMLParserConfig… 

    …uration
    @TamasPergerDWP
    TamasPergerDWP committed Feb 12, 2023
    Configuration menu
    Copy the full SHA
    72f4c3e View commit details
    Browse the repository at this point in the history

Commits on Feb 13, 2023

  1. refactor: make JSONMLParserConfiguration all-args constructor private… 

    …, enforcing the builder pattern.
    @TamasPergerDWP
    TamasPergerDWP committed Feb 13, 2023
    Configuration menu
    Copy the full SHA
    9234eab View commit details
    Browse the repository at this point in the history