WW-5621 Harden XML parsers against Entity Expansion (Billion Laughs) attacks #1642

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

lukaszlenart merged 1 commit into main from harden/xml-entity-expansion-protection

Apr 4, 2026

Merged

WW-5621 Harden XML parsers against Entity Expansion (Billion Laughs) attacks #1642

WW-5621 Harden XML parsers against Entity Expansion (Billion Laughs) …

SonarQubeCloud / SonarCloud Code Analysis failed Mar 29, 2026 in 1m 8s

Quality Gate failed

Failed conditions
75.0% Coverage on New Code (required ≥ 80%)
B Maintainability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 83 in plugins/xslt/src/main/java/org/apache/struts2/result/xslt/StringAdapter.java

sonarqubecloud / SonarCloud Code Analysis

Do not forget to remove this deprecated code someday.

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ04Ix6noHL-2mk7ahBy&open=AZ04Ix6noHL-2mk7ahBy&pullRequest=1642

Check warning on line 93 in plugins/xslt/src/main/java/org/apache/struts2/result/xslt/StringAdapter.java

sonarqubecloud / SonarCloud Code Analysis

Do not forget to remove this deprecated code someday.

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ04Ix6noHL-2mk7ahBz&open=AZ04Ix6noHL-2mk7ahBz&pullRequest=1642

View more details on SonarQubeCloud