Skip to content

Updating Java XXE rule - SAXParserFactory Disallow Doctype Decl Missing

Bhavya Kaushal requested to merge java-xxe-saxparser into main

What does this MR do?

  1. Updates the SAXParserFactory Disallow Doctype Decl Missing SAST rule with upgraded patterns from community rule.
  2. Updates corresponding test files
  3. Changes mapping

What are the relevant issue numbers?

Addresses issue: gitlab-org/gitlab#441034 (closed)

Does this MR meet the acceptance criteria?

Merge request reports