Re: OAuth client and server demos

Hi Sergey, Thanks for feedback. More comments below. 2010/8/13 Sergey Beryozkin > Hi Lucasz > > 2010/8/13 Łukasz Moreń > > > Hi Sergey, > > > > I've added some improvements to demo and protocol implementation. > > I hope this time build will be fine. > > > > > I've had no problems building thi

Re: DTD based XML attacks - refering to Apache CXF Security Advisory (CVE-2010-2076)

First we tried to use the staxiniterceptor in order to register the XMLInputFactory which is mentioned in the advisory document. but we had some problems with JSON requests and encoding of utf-8 messages. so what we have done is to extend jaxbelementprovider as you mention. -- View this message