Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-10213

XML RPC server uses platform default character encoding to decode requests

      The Apache XML-RPC server included with Confluence uses the MinML sax parser by default to parse incoming RPC requests. This parser uses the platform default character encoding to decode the incoming XML instead of standard XML procedures for determining document encoding. This can cause string corruption when the platform encoding is not compatible with the encoding and characters used in the XML-RPC call.

      Apache XML-RPC server allows any JAXP standard parser to be used to parse incoming requests; we should configure it to use Xerces which is already included with Confluence and obeys the rules regarding XML document encoding.

            [CONFSERVER-10213] XML RPC server uses platform default character encoding to decode requests

            Found an older issue related to this which was supposedly fixed in Confluence 2.0. May have been a false fix as platform encoding during tests was probably UTF-8

            Christopher Owen [Atlassian] added a comment - Found an older issue related to this which was supposedly fixed in Confluence 2.0. May have been a false fix as platform encoding during tests was probably UTF-8

            Adding 2.7.1 to put it on bugfix team radar. I'll leave it to them to decide whether this should make a stable release

            Christopher Owen [Atlassian] added a comment - Adding 2.7.1 to put it on bugfix team radar. I'll leave it to them to decide whether this should make a stable release

            Changed the default sax parser to be Apache Xerces. Also allow for customisation of the parser via the confluence.rpc.xml.sax.parser system property.

            Christopher Owen [Atlassian] added a comment - Changed the default sax parser to be Apache Xerces. Also allow for customisation of the parser via the confluence.rpc.xml.sax.parser system property.

            CONF-10140: Initial issue which led to this discovery

            Christopher Owen [Atlassian] added a comment - CONF-10140 : Initial issue which led to this discovery

              pcurren Paul Curren
              christopher.owen@atlassian.com Christopher Owen [Atlassian]
              Affected customers:
              0 This affects my team
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: