I am parsing a huge XML file using BufferedReader in my application and while scanning it through IBM Appscan (which is a mandate in our organisation) it is showing High Vulnerability of Denial of Service (DoS) attack (Issue type AppDOS). I have already tried BoundedBufferedReader to limit the number of characters while parsing to resolve the issue. However, I am still facing the same issue. Let me know if there is any solution or suggestion to fix it.
Asked
Active
Viewed 285 times
0
-
It works with a non-buffered Reader? – Joop Eggen Jan 18 '18 at 12:16
-
It is then impacting the performance of the application – Akki Jan 18 '18 at 12:30
-
Okay, as it works with a Reader, try to circument Appscan by a BufferedOutputStream, or other means like when a timeout is possible, or maybe a smaller buffer size. – Joop Eggen Jan 18 '18 at 13:53