Bug 1165127

Summary: [Doc Bug Fix] New configuration parameters for resteasy
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Katerina Odabasi <kanovotn>
Component: DocumentationAssignee: Nidhi <nchaudha>
Status: CLOSED CURRENTRELEASE QA Contact: Katerina Odabasi <kanovotn>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 6.4.0CC: dmichael, nchaudha
Target Milestone: ER3Keywords: Documentation, EasyFix, Triaged
Target Release: EAP 6.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: DG
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Build Name: 22816, Development Guide-6.3-1 Build Date: 18-11-2014 15:56:42 Topic ID: 5555-667856 [Latest]
Last Closed: 2015-04-17 05:40:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1090487    
Bug Blocks:    

Description Katerina Odabasi 2014-11-18 11:59:02 UTC
Title: RESTEasy Configuration Parameters

Describe the issue:
Resteasy 2.3.9 introduced two new parameters as part of the fix of BZ#1090487:

resteasy.document.secure.processing.feature
resteasy.document.secure.disableDTDs

See upstream jira RESTEASY-1055 for details.

Suggestions for improvement:
See upstream doc:
http://docs.jboss.org/resteasy/docs/2.3.7.Final/userguide/html_single/index.html#d4e39

Additional information:

Comment 1 Katerina Odabasi 2015-01-19 09:30:34 UTC
Correction of the link for the reference upstream documentation:
http://docs.jboss.org/resteasy/docs/3.0.9.Final/userguide/html_single/

The following two parameters from the above link need to be copied to the documentation:
Name: resteasy.document.secure.processing.feature 	
Default value: true
Description: Impose security constraints in processing org.w3c.dom.Document documents and JAXB object representations

Name: resteasy.document.secure.disableDTDs
Default value: true
Description: Prohibit DTDs in org.w3c.dom.Document documents and JAXB object representations