root
/
spring-framework
mirror of https://github.com/spring-projects/spring-framework.git
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity
spring-framework/spring-core
History
Rossen Stoyanchev 673a20cb10 Defensive initialization of AsyncXMLInputFactory 
Aalto's InputFactoryImpl already disables loading of external entities
by default (property "javax.xml.stream.isSupportingExternalEntities").
This commit goes further by applying the same defensive measures as we
do elsewhere for XMLInputFactory, which disables DTD completely.
Arguably there is no good reason to enable that by default in WebFlux.
 		2019-01-07 13:52:46 -05:00
..
src Defensive initialization of AsyncXMLInputFactory 2019-01-07 13:52:46 -05:00
spring-core.gradle Upgrade to CGLIB 3.2.10 2018-12-12 16:03:31 +01:00