eclipse-tractusx / eclipse-tractusx/knowledge-agents

conforming-agent: Add Schema Validation to Xml/JsonProvider

Open
#32 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
1
Forks
5
PR merge metrics
No merged PRs in 30d

Description

## Description / As-Is

XML/JsonProvider convert any incoming message/request body into java structures. By knowing the execution environment, an attacker could try to design input structures in order to target the evaluation logic behind.

## How it should be

XML/JsonProvider should validate incoming message/request bodies according to a set of allowed schemas. this restricts the opportunities to design arbitrary input structures.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.