mpretzer

Forked iText still vulnerable to XXE (CVE-2017-9096)

1

Fix for iText5: https://github.com/itext/itextpdf/commit/ad38371c396ac5ffbfb28056809e8ffaa5a18ccd Similar fixes where applied to OpenPDF. https://jaspersoft.jfrog.io/ui/native/third-party-ce-artifacts/com/lowagie/itext/2.1.7.js9 still contains vulnerable code.

restore TestUtilities#invokeBytes(String,String,byte[])

1

In our Tests, we use `TestUtilities#invokeBytes(String,String,byte[])` to send dynamically generated content to our services. This is no longer possible with CXF 3.5 since it was removed in b902794f187035a6efe39e3632ccc7be0adc8a89. This PR...

### Request details Currently, it seems only possible to specify database connection in a fixed format, e.g. ``` database: "mariadb somehost.fqdn:3306 reposilite reposilite reposilite" ``` I would like to be...