[jira] [Updated] (XMLBEANS-672) set limit on length of numbers

     [ https://issues.apache.org/jira/browse/XMLBEANS-672?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

PJ Fanning updated XMLBEANS-672:
--------------------------------
    Description: 
parsing numbers with thousands of digits can cause performance issues and is likely a sign of malicious input
large exponents on decimals can also be an issue

XmlOptions.setMaxNumberOfCharsForNumbers can be used to change the default limit of 1000 but this option is only checked in a few parts of the code that have access to the options instance. A lot of the code will effectively use the hardcoded 1000 limit.

  was:
parsing numbers with thousands of digits can cause performance issues and is likely a sign of malicious input
large exponents on decimals can also be an issue


> set limit on length of numbers
> ------------------------------
>
>                 Key: XMLBEANS-672
>                 URL: https://issues.apache.org/jira/browse/XMLBEANS-672
>             Project: XMLBeans
>          Issue Type: Task
>            Reporter: PJ Fanning
>            Priority: Major
>             Fix For: 5.4.0
>
>
> parsing numbers with thousands of digits can cause performance issues and is likely a sign of malicious input
> large exponents on decimals can also be an issue
> XmlOptions.setMaxNumberOfCharsForNumbers can be used to change the default limit of 1000 but this option is only checked in a few parts of the code that have access to the options instance. A lot of the code will effectively use the hardcoded 1000 limit.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)