CodeQL: Disable external XML parsing in kmip-client
Maintainers usually reply within 1 day
@kamtso-jpl is already working on this.
Since Dec 11, 2025.
Assessment
This issue has not been assessed yet.
Description
CodeQL complains about use of XML parsing without disabling external document reading in:
kmip-client/src/main/java/ch/ntb/inf/kmip/config/ContextProperties.java
public void decode() {
SAXReader xmlReader = new SAXReader();
xmlReader.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true); -- add this line
}
- Dominant language
- Java
- Stars
- 5
- Forks
- 5
- Avg merge
- 1d 6h
- Merged PRs (30d)
- 11
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from NASA-AMMOS/DCS
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
NASA-AMMOS/DCS#66 ·
Maintainers usually reply within 1 day
-
CodeQL: Update KMIP Client to use TLSV1.2May be free again @kamtso-jpl claimed this 312 days ago, and no pull request is open. Opencrit-3 security
NASA-AMMOS/DCS#55 · 1 assignee ·
Maintainers usually reply within 1 day
-
CodeQL: Potential overflow in test codeMay be free again @kamtso-jpl claimed this 312 days ago, and no pull request is open. Opencrit-4 security
NASA-AMMOS/DCS#53 · 1 assignee ·
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 38/100
NASA-AMMOS/DCS#50 ·
Maintainers usually reply within 1 day
-
crit-3 security
Difficulty 2/5 1-3 hours Newbie friendliness 48/100
NASA-AMMOS/DCS#49 ·
Maintainers usually reply within 1 day
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
apache/rocketmq-dashboard#6331 ·
Maintainers usually reply within 5 days
-
status: team-only type: dependency-upgrade
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
spring-projects/spring-boot#52143 · 1 comment ·
Maintainers usually reply within 1 day
-
area/frontend good first issue kind/cooldown
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
kestra-io/kestra#20704 · 1 comment ·
Maintainers usually reply within 1 day