xmlProtection

Description

Prohibits XML documents to be passed through that look like XML attacks on older parsers. Too many attributes, too long element names are such indications. DTD definitions will simply be removed.

Can be used in

spring:beans, api, bean, if, interceptor, internalProxy, proxy, registration, request, response, serviceProxy, soapProxy, stompProxy, swaggerProxy, transport and wsStompReassembler

Syntax

				<xmlProtection removeDTD="boolean"
					maxElementNameLength="integer" maxAttibuteCount="integer" />
			

Sample

				<beans>
					<transport coreThreadPoolSize="20">
						<ruleMatching />
						<dispatching />
						<userFeature />
			
						<xmlProtection />
			
						<httpClient />
					</transport>
				</beans>
			

Attributes