Saved searches

Use saved searches to filter your results more quickly

Cancel Create saved search Sign up Reseting focus

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fortify Issue - Weak XML Schema #292

cmheazel opened this issue Dec 31, 2017 · 0 comments

Fortify Issue - Weak XML Schema #292

cmheazel opened this issue Dec 31, 2017 · 0 comments

Comments

Contributor cmheazel commented Dec 31, 2017

A Fortify scan against a December 28, 2017 download of the TeamEngine source tree has identified four high priority security issues with the XML schema used by TeamEngine. Of these schema, only the ctl.xsd file is not a copy of an OGC or W3C standard schema. We may be able to adjudicate these issues by referring to the industry standards. But software mods to address these issues would be a more useful resolution. Particularly since these vulnerabilities effect any software using those standards.

Use of Lax Processing
Use of element or attribute type "Any"
Use of unbounded cardinality
Use of undefined namespace

The text was updated successfully, but these errors were encountered: