Warning: file_get_contents(/data/phpspider/zhask/data//catemap/9/security/4.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181
Security ServiceStack XML炸弹和外部实体攻击_Security_<img Src="//i.stack.imgur.com/WM7S8.png" Height="16" Width="18" Alt="" Class="sponsor Tag Img">servicestack - Fatal编程技术网 servicestack,Security,servicestack" /> servicestack,Security,servicestack" />
Fatal编程技术网
  • security/
  • Security ServiceStack XML炸弹和外部实体攻击

Security ServiceStack XML炸弹和外部实体攻击

security

Security ServiceStack XML炸弹和外部实体攻击,security,servicestack,Security,servicestack,我在微软的网站上读到一篇关于 我很好奇ServiceStack是否容易受到这些攻击，如果必要的话，如何应用MS的以下建议 XmlReaderSettings settings = new XmlReaderSettings(); settings.DtdProcessing = DtdProcessing.Prohibit; settings.MaxCharactersFromEntities = 1024; settings.XmlResolver = null; 不知道你是否得到过答案。

我在微软的网站上读到一篇关于

我很好奇ServiceStack是否容易受到这些攻击，如果必要的话，如何应用MS的以下建议

XmlReaderSettings settings = new XmlReaderSettings();
settings.DtdProcessing = DtdProcessing.Prohibit;
settings.MaxCharactersFromEntities = 1024;
settings.XmlResolver = null;
不知道你是否得到过答案。我看到了脆弱性，需要缓解

这是现在的v5.0.1版本