Joerg Hoh created SLING-13336:
---------------------------------
Summary: Missing resource limits in XML/JSON validation
Key: SLING-13336
URL: https://issues.apache.org/jira/browse/SLING-13336
Project: Sling
Issue Type: Improvement
Components: XSS Protection API
Reporter: Joerg Hoh
Utility methods that validate XML and JSON input did not configure resource
limits appropriate for handling untrusted input. This could, under certain
conditions, allow specially crafted input to cause excessive resource
consumption.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
