{"action":"created","issue":{"url":"https://api.github.com/repos/chrsmith/google-api-java-client/issues/64","labels_url":"https://api.github.com/repos/chrsmith/google-api-java-client/issues/64/labels{/name}","comments_url":"https://api.github.com/repos/chrsmith/google-api-java-client/issues/64/comments","events_url":"https://api.github.com/repos/chrsmith/google-api-java-client/issues/64/events","html_url":"https://github.com/chrsmith/google-api-java-client/issues/64","id":59363719,"number":64,"title":"Secure XML parser","user":{"login":"GoogleCodeExporter","id":9614759,"avatar_url":"https://avatars.githubusercontent.com/u/9614759?v=3","gravatar_id":"","url":"https://api.github.com/users/GoogleCodeExporter","html_url":"https://github.com/GoogleCodeExporter","followers_url":"https://api.github.com/users/GoogleCodeExporter/followers","following_url":"https://api.github.com/users/GoogleCodeExporter/following{/other_user}","gists_url":"https://api.github.com/users/GoogleCodeExporter/gists{/gist_id}","starred_url":"https://api.github.com/users/GoogleCodeExporter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GoogleCodeExporter/subscriptions","organizations_url":"https://api.github.com/users/GoogleCodeExporter/orgs","repos_url":"https://api.github.com/users/GoogleCodeExporter/repos","events_url":"https://api.github.com/users/GoogleCodeExporter/events{/privacy}","received_events_url":"https://api.github.com/users/GoogleCodeExporter/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/chrsmith/google-api-java-client/labels/auto-migrated","name":"auto-migrated","color":"ededed"},{"url":"https://api.github.com/repos/chrsmith/google-api-java-client/labels/Component-XML","name":"Component-XML","color":"ededed"},{"url":"https://api.github.com/repos/chrsmith/google-api-java-client/labels/Milestone-Version1.4.0","name":"Milestone-Version1.4.0","color":"ededed"},{"url":"https://api.github.com/repos/chrsmith/google-api-java-client/labels/Priority-Medium","name":"Priority-Medium","color":"ededed"},{"url":"https://api.github.com/repos/chrsmith/google-api-java-client/labels/Type-Enhancement","name":"Type-Enhancement","color":"ededed"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-02-28T22:54:11Z","updated_at":"2015-02-28T22:54:12Z","closed_at":"2015-02-28T22:54:11Z","body":"```\nExternal references, such as a standards document, or specification?\n\nhttp://www.google.com/codesearch/p?hl=en#EOYaOg_yTgg/trunk/java/src/com/google/g\ndata/util/common/xml/parsing/SecureGenericXMLFactory.java&q=SecureGenericXMLFact\nory%20package:http://gdata-java-client%5C.googlecode%5C.com&sa=N&cd=1&ct=rc\n\nJava environments (e.g. Java 6, Android 2.2, App Engine 1.3.7, or All)?\n\nAll.\n\nPlease describe the feature requested.\n\nWe need to make our XML parser secure.  Note that there are problems with this \nimplementation when running on Android.\n```\n\nOriginal issue reported on code.google.com by `yan...@google.com` on 12 Nov 2010 at 2:11"},"comment":{"url":"https://api.github.com/repos/chrsmith/google-api-java-client/issues/comments/76553809","html_url":"https://github.com/chrsmith/google-api-java-client/issues/64#issuecomment-76553809","issue_url":"https://api.github.com/repos/chrsmith/google-api-java-client/issues/64","id":76553809,"user":{"login":"GoogleCodeExporter","id":9614759,"avatar_url":"https://avatars.githubusercontent.com/u/9614759?v=3","gravatar_id":"","url":"https://api.github.com/users/GoogleCodeExporter","html_url":"https://github.com/GoogleCodeExporter","followers_url":"https://api.github.com/users/GoogleCodeExporter/followers","following_url":"https://api.github.com/users/GoogleCodeExporter/following{/other_user}","gists_url":"https://api.github.com/users/GoogleCodeExporter/gists{/gist_id}","starred_url":"https://api.github.com/users/GoogleCodeExporter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GoogleCodeExporter/subscriptions","organizations_url":"https://api.github.com/users/GoogleCodeExporter/orgs","repos_url":"https://api.github.com/users/GoogleCodeExporter/repos","events_url":"https://api.github.com/users/GoogleCodeExporter/events{/privacy}","received_events_url":"https://api.github.com/users/GoogleCodeExporter/received_events","type":"User","site_admin":false},"created_at":"2015-02-28T22:54:12Z","updated_at":"2015-02-28T22:54:12Z","body":"```\nDoesn't seem applicable because the code above is for securing \nSAXParserFactory.  None of these settings seem to be available for \nXmlPullParser as far as I can tell.\n```\n\nOriginal comment by `yan...@google.com` on 31 Jan 2011 at 9:51\n* Changed state: **WontFix**"}}