Information
  • Author: Appian Corporation
  • Type: Plug-in (Function & Smart Service)
  • Support: This plug-in or utility is not supported by the author. The content is free to use with a licensed product, but it is made available as-is and Community supported.
  • Industry: All Industries
  • Compatible Version(s): 22.1
  • First Released:
  • Last Updated:
  • Cost: Free
Share
Home » AppMarket » XML Parser

XML Parser

Overview

Converts an XML string into a JSON string. In combination with a!fromJson, this allows for parsing an XML string into an Appian Dictionary.

Key Features & Functionality

Update 1.0.4

  • Removes old dependencies

Update 1.0.2

  • Adds 'removeNamespace' optional boolean parameter to xmltojson which strips all namespace prefixes and xmlns declaration tags

Update 1.0.1

  • Updated to the latest org.json library.
    • No longer parses numbers leading with 0 as octet numbers
    • Adds 'stringsOnly' optional boolean parameter to xmltojson which force casts all XML values to strings, rather than trying to parse booleans and numbers.
      fn!xmltojson
Anonymous
Parents

  • Hi, It appears that this plugin uses Log4J 1.2.15. Can you please update the plugin to the latest version of log4J to conter the recent vulnerability - CVE-2021-44228

  • in reply to arjunvs

    Version of log4j in this package is 1.2.15 and not 2.15 unless I'm mistaken.

    CVE-2021-44228: Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.14.1

    CVE-2021-45046: Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0

    Having said this package uses an old version of jackson-databind which contains quite a few other critical CVEs. This dependency should probably be updated to the latest version.

Comment
  • in reply to arjunvs

    Version of log4j in this package is 1.2.15 and not 2.15 unless I'm mistaken.

    CVE-2021-44228: Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.14.1

    CVE-2021-45046: Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0

    Having said this package uses an old version of jackson-databind which contains quite a few other critical CVEs. This dependency should probably be updated to the latest version.

Children
No Data
© 2024 Appian. All rights reserved.
We want to hear from you! Submit a review on Gartner or G2.