Ben McIlwain eda0f7ad7c Harden EppXmlSanitizer against XXE and entity expansion (#3117) ...

Configure a throwing XMLResolver on XMLInputFactory in XmlTransformer
to act as an additional defense-in-depth security layer against XML
External Entity (XXE) and entity expansion/resolution attacks.
This prevents resolution of external and internal entities in StAX
parsing pipelines, ensuring that malformed payloads containing entity
definitions are safely blocked and rejected.

Also add a unit test to EppXmlSanitizerTest verifying that EPP
messages containing DTD and external entities fail parsing and fall
back safely to their Base64 representation.

TAG=agy
CONV=610c2358-a99f-4605-94cd-ff0d4ee08176

BUG= http://b/529387728

2026-06-30 18:19:50 +00:00

..

src

Harden EppXmlSanitizer against XXE and entity expansion (#3117)

2026-06-30 18:19:50 +00:00

build.gradle

Restore default builds and fix Kokoro tests (#3081)

2026-06-04 15:38:03 +00:00

buildscript-gradle.lockfile

Upgrade to Gradle 9 (#2993)

2026-03-30 17:15:55 +00:00

Dockerfile

Upgrade to Java 25 (#3000)

2026-04-02 21:23:00 +00:00

gradle.lockfile

Remove usages of json-simple (#3060)

2026-06-01 20:16:32 +00:00