We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Describe the bug ParserConfigurationException when using XpathUtils
To Reproduce
Which AWS service(s) are affected? Amazon S3
Expected behavior Correctly parse the response body and correctly handle "RequestTimeTooSkewed" error.
Screenshots
XpathUtils.java
private static DocumentBuilderFactory getDocumentBuilderFactory() { try { DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance(); dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true); dbf.setXIncludeAware(false); // Default false for java 8. Disable XML Inclusions leading to SSRF - https://portswigger.net/web-security/xxe/lab-xinclude-attack dbf.setExpandEntityReferences(false); return dbf; } catch (ParserConfigurationException exception){ return null; } }
Environment Information (please complete the following information):
Additional context This modification seems to have affected.
The text was updated successfully, but these errors were encountered:
@noropoly Thank you for the report. We have done further testing and confirmed a fix to revert the change. #3353
Sorry, something went wrong.
A fix has been released in AWS SDK for Android 2.72.0. Please let us know if you have any additional questions.
tylerjroach
No branches or pull requests
Describe the bug
ParserConfigurationException when using XpathUtils
To Reproduce
Which AWS service(s) are affected?
Amazon S3
Expected behavior
Correctly parse the response body and correctly handle "RequestTimeTooSkewed" error.
Screenshots
XpathUtils.java
Environment Information (please complete the following information):
Additional context
This modification seems to have affected.
The text was updated successfully, but these errors were encountered: