Apache
/
activemq
mirror of https://github.com/apache/activemq.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #697 from skyguard1/fix_xstream_xml_risk 

[AMQ-8348] Fix XmlMessageRenderer has the risk of XStream deserialization
This commit is contained in:
Jean-Baptiste Onofré 2021-08-06 07:19:16 +02:00 committed by GitHub
parent f49b04c15a 099108239c
commit 4fd439e91d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
activemq-web/src/main/java/org/apache/activemq/web/view/XmlMessageRenderer.java
View File

@ -42,6 +42,7 @@ public class XmlMessageRenderer extends SimpleMessageRenderer {
public XStream getXstream() {
if (xstream == null) {
xstream = new XStream();
XStream.setupDefaultSecurity(xstream);
}
return xstream;
}