How to disable External Entity attack injection vulnerabilities

[hiteshchauhan]

Hello Everyone,

We are using older version ismorphic library to show data in grid. But there is issue with External Entity attack injection vulnerabilities as mentioned in this link https://www.gracefulsecurity.com/xml...lnerabilities/

How do we disable external entity attack ? Is there any setting that we can do. I have gone through documentation and could not find any such information.

Appreciate if anyone know answer to this.

thanks,
Hitesh

[satya_paul]

Hi SmartClient Admin,

I am facing the same issue. I have posted a query today. Please help us in resolving this issue. Our client is going live this friday.

[satya_paul]

Looks like fix is available for version 9.0. Please check : http://forums.smartclient.com/forum/...billion-laughs