eclipse-tractusx / eclipse-tractusx/knowledge-agents
conforming-agent: Add Schema Validation to Xml/JsonProvider
Open
- Dominant language
- Java
- Stars
- 1
- Forks
- 5
- PR merge metrics
- No merged PRs in 30d
Description
## Description / As-Is
XML/JsonProvider convert any incoming message/request body into java structures. By knowing the execution environment, an attacker could try to design input structures in order to target the evaluation logic behind.
## How it should be
XML/JsonProvider should validate incoming message/request bodies according to a set of allowed schemas. this restricts the opportunities to design arbitrary input structures.
Contributor guide
Assessment
This issue has not been assessed yet.