micord/ervu-eks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'hotfix/1.1.5'

Browse source
This commit is contained in:
adel.ka 2025-11-21 18:18:04 +03:00
commit 84b08ce448
6 changed files with 23 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
backend/pom.xml
View file

@ -5,7 +5,7 @@
<parent> <parent>
<groupId>ru.micord.ervu</groupId> <groupId>ru.micord.ervu</groupId>
<artifactId>eks</artifactId> <artifactId>eks</artifactId>
<version>1.1.4</version> <version>1.1.5</version>
</parent> </parent>
<groupId>ru.micord.ervu.eks</groupId> <groupId>ru.micord.ervu.eks</groupId>
<artifactId>backend</artifactId> <artifactId>backend</artifactId>

2
config-data-executor/pom.xml
View file

@ -6,7 +6,7 @@
<parent> <parent>
<groupId>ru.micord.ervu</groupId> <groupId>ru.micord.ervu</groupId>
<artifactId>eks</artifactId> <artifactId>eks</artifactId>
<version>1.1.4</version> <version>1.1.5</version>
</parent> </parent>
<groupId>ru.micord.ervu.eks</groupId> <groupId>ru.micord.ervu.eks</groupId>
<artifactId>config-data-executor</artifactId> <artifactId>config-data-executor</artifactId>

20
config-data-executor/src/main/java/org/micord/service/RequestService.java
View file

@ -23,6 +23,7 @@ import java.util.stream.IntStream;
import javax.xml.parsers.DocumentBuilder; import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory; import javax.xml.parsers.DocumentBuilderFactory;
import jakarta.annotation.PostConstruct;
import org.micord.config.ArangoDBConnection; import org.micord.config.ArangoDBConnection;
import org.micord.config.DatabaseConnection; import org.micord.config.DatabaseConnection;
import org.micord.config.S3HttpConnection; import org.micord.config.S3HttpConnection;
@ -56,12 +57,18 @@ public class RequestService {
private static final Logger logger = LoggerFactory.getLogger(RequestService.class); private static final Logger logger = LoggerFactory.getLogger(RequestService.class);
private DocumentBuilderFactory secureDocumentFactory;
@Autowired @Autowired
private HttpClient httpClient; private HttpClient httpClient;
@Autowired @Autowired
private ValidationService validationService; private ValidationService validationService;
@PostConstruct
public void init() {
secureDocumentFactory = createSecureDocumentBuilderFactory();
}
private void processS3Request(S3Request request, RequestParameters parameters, Map<String, Boolean> validationResults) { private void processS3Request(S3Request request, RequestParameters parameters, Map<String, Boolean> validationResults) {
logger.info("B. Starting processing of single S3 request"); logger.info("B. Starting processing of single S3 request");
try { try {
@ -219,8 +226,7 @@ public class RequestService {
private void handleErrorResponse(HttpResponse<String> response, String file) { private void handleErrorResponse(HttpResponse<String> response, String file) {
try { try {
DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance(); DocumentBuilder builder = secureDocumentFactory.newDocumentBuilder();
DocumentBuilder builder = factory.newDocumentBuilder();
InputSource is = new InputSource(new StringReader(response.body())); InputSource is = new InputSource(new StringReader(response.body()));
Document doc = builder.parse(is); Document doc = builder.parse(is);
Element root = doc.getDocumentElement(); Element root = doc.getDocumentElement();
@ -703,4 +709,14 @@ public class RequestService {
} }
} }
private DocumentBuilderFactory createSecureDocumentBuilderFactory() {
DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
try {
factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
}
catch (Exception e) {
throw new RuntimeException("Failed to secure XML parser", e);
}
return factory;
}
} }

2
frontend/pom.xml
View file

@ -4,7 +4,7 @@
<parent> <parent>
<groupId>ru.micord.ervu</groupId> <groupId>ru.micord.ervu</groupId>
<artifactId>eks</artifactId> <artifactId>eks</artifactId>
<version>1.1.4</version> <version>1.1.5</version>
</parent> </parent>
<groupId>ru.micord.ervu.eks</groupId> <groupId>ru.micord.ervu.eks</groupId>

2
pom.xml
View file

@ -4,7 +4,7 @@
<modelVersion>4.0.0</modelVersion> <modelVersion>4.0.0</modelVersion>
<groupId>ru.micord.ervu</groupId> <groupId>ru.micord.ervu</groupId>
<artifactId>eks</artifactId> <artifactId>eks</artifactId>
<version>1.1.4</version> <version>1.1.5</version>
<packaging>pom</packaging> <packaging>pom</packaging>
<modules> <modules>
<module>backend</module> <module>backend</module>

2
resources/pom.xml
View file

@ -4,7 +4,7 @@
<parent> <parent>
<groupId>ru.micord.ervu</groupId> <groupId>ru.micord.ervu</groupId>
<artifactId>eks</artifactId> <artifactId>eks</artifactId>
<version>1.1.4</version> <version>1.1.5</version>
</parent> </parent>
<groupId>ru.micord.ervu.eks</groupId> <groupId>ru.micord.ervu.eks</groupId>