Repository navigation
Validate QName inputs #48
Description
QName doesn't validate inputs, so it is possible to create QName for example with '<' in the tag name.
The bug was reported by @mario-areias, thanks!
{{ message }}
QName doesn't validate inputs, so it is possible to create QName for example with '<' in the tag name.
The bug was reported by @mario-areias, thanks!
Activity
#48 Validate QName inputs - throw IllegalArgumentException when quali…
vdotjansen commentedon Nov 20, 2018
I see this is fixed in both 2.0.3 and 2.1.1, when is 2.0.3 to be released?
backported: dom4j#48 Validate QName inputs - throw IllegalArgumentExc…
Marcono1234 commentedon Apr 27, 2019
@FilipJirsak, doesn't the same issue also apply to the
urifield?wilx commentedon Sep 23, 2019
Will there be a 2.0.x release with this fix? We have to support older software that has to run with Java 7 still.
dom4j#48 Validate QName inputs - throw IllegalArgumentException when …
dom4j#48 Validate QName inputs - throw IllegalArgumentException when …
dom4j#48 Validate QName inputs - throw IllegalArgumentException when …
dom4j#48 Validate QName inputs - throw IllegalArgumentException when …
#48 Validate QName inputs - throw IllegalArgumentException when quali…
CVE-2018-1000632: reject element, attribute and namespace prefix name…