Codehuse XFire and DTD

S

shenhav.yossi

Hello,

I use XFire and Tomcat to buid a web service.
I want to configure XFire to support XML 1.1 only (and not to support
DTD which is XML 1.0 standard)..
In particular I would like to prevent potenial attacker from sending
SOAP request that inculde DTD elements (otherwise known as XML bomb).

Does anybody know of such configuration?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
473,744
Messages
2,569,482
Members
44,900
Latest member
Nell636132

Latest Threads

Top