├── .gitignore ├── README.md ├── gradle └── wrapper │ ├── gradle-wrapper.jar │ └── gradle-wrapper.properties ├── gradlew ├── gradlew.bat ├── settings.gradle └── src └── main ├── java └── com │ └── leadroyal │ └── xxe │ ├── Main.java │ ├── ResourceUtils.java │ ├── model │ └── Person.java │ └── sample │ ├── DocumentBuilderFactorySample.java │ ├── SAXBuilderSample.java │ ├── SAXParserFactorySample.java │ ├── SAXReaderSample.java │ ├── SAXTransformerFactorySample.java │ ├── SchemaFactorySample.java │ ├── TransformerFactorySample.java │ ├── UnmarshallerSample.java │ ├── ValidatorSample.java │ ├── XMLInputFactorySample.java │ └── XMLReaderSample.java └── resources ├── poc1.xml ├── poc2.xml └── poc3.xsl /.gitignore: -------------------------------------------------------------------------------- 1 | .gradle/ 2 | .idea/ 3 | build/ 4 | lib/ 5 | target/ 6 | out/ 7 | *.iml 8 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/README.md -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/gradle/wrapper/gradle-wrapper.jar -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/gradle/wrapper/gradle-wrapper.properties -------------------------------------------------------------------------------- /gradlew: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/gradlew -------------------------------------------------------------------------------- /gradlew.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/gradlew.bat -------------------------------------------------------------------------------- /settings.gradle: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/settings.gradle -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/Main.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/Main.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/ResourceUtils.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/ResourceUtils.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/model/Person.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/model/Person.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/DocumentBuilderFactorySample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/DocumentBuilderFactorySample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/SAXBuilderSample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/SAXBuilderSample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/SAXParserFactorySample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/SAXParserFactorySample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/SAXReaderSample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/SAXReaderSample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/SAXTransformerFactorySample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/SAXTransformerFactorySample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/SchemaFactorySample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/SchemaFactorySample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/TransformerFactorySample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/TransformerFactorySample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/UnmarshallerSample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/UnmarshallerSample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/ValidatorSample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/ValidatorSample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/XMLInputFactorySample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/XMLInputFactorySample.java -------------------------------------------------------------------------------- /src/main/java/com/leadroyal/xxe/sample/XMLReaderSample.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/java/com/leadroyal/xxe/sample/XMLReaderSample.java -------------------------------------------------------------------------------- /src/main/resources/poc1.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/resources/poc1.xml -------------------------------------------------------------------------------- /src/main/resources/poc2.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/resources/poc2.xml -------------------------------------------------------------------------------- /src/main/resources/poc3.xsl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LeadroyaL/java-xxe-defense-demo/HEAD/src/main/resources/poc3.xsl --------------------------------------------------------------------------------