[
https://issues.apache.org/jira/browse/XMLBEANS-672?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
PJ Fanning updated XMLBEANS-672:
--------------------------------
Description:
parsing numbers with thousands of digits can cause performance issues and is
likely a sign of malicious input
large exponents on decimals can also be an issue
XmlOptions.setMaxNumberOfCharsForNumbers can be used to change the default
limit of 1000 but this option is only checked in a few parts of the code that
have access to the options instance. A lot of the code will effectively use the
hardcoded 1000 limit.
was:
parsing numbers with thousands of digits can cause performance issues and is
likely a sign of malicious input
large exponents on decimals can also be an issue
> set limit on length of numbers
> ------------------------------
>
> Key: XMLBEANS-672
> URL: https://issues.apache.org/jira/browse/XMLBEANS-672
> Project: XMLBeans
> Issue Type: Task
> Reporter: PJ Fanning
> Priority: Major
> Fix For: 5.4.0
>
>
> parsing numbers with thousands of digits can cause performance issues and is
> likely a sign of malicious input
> large exponents on decimals can also be an issue
> XmlOptions.setMaxNumberOfCharsForNumbers can be used to change the default
> limit of 1000 but this option is only checked in a few parts of the code that
> have access to the options instance. A lot of the code will effectively use
> the hardcoded 1000 limit.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
