Hi

On Mon, Aug 2, 2010 at 3:00 PM, Tal Maayani <tal.maay...@amdocs.com> wrote:

> Hi,
>
> According to your advice, in order to block DTD based XML attack one need
> to either use CXF version 2.2.9 or replace the default xml parser.
>
> there is an issue with (JAXRS) SourceProvider in 2.2.9 which I missed. But
this provider is optional. As far as I know Dan has done some refactoring in
2.2.10-SNAPSHOT which also helped to fix the SourceProvider issue.


> Can you please explain how to replace the xml parser when using REST
> service.
>

are you using JAXB in your JAXRS services ?

cheers, Sergey


>
> Thanks,
> Tal Maayani
>
> Office: 972-9-776-3883
>
>
> This message and the information contained herein is proprietary and
> confidential and subject to the Amdocs policy statement,
> you may review at http://www.amdocs.com/email_disclaimer.asp
>

Reply via email to