groovy-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Russel Winder <rus...@winder.org.uk>
Subject Re: XML RPC Service
Date Tue, 24 Jul 2018 10:33:57 GMT
I suspect XML-RPC is pure legacy. It evolved into SOAP and that is pure
legacy.

All the Web Services folk I know are now using RESTful HTTP/HTTPS 
microservices.

On Sat, 2018-07-21 at 16:50 +0200, Jacques Le Roux wrote:
> Hi Bernhard,
> 
> Actually XML-RPC is no longer maintained, last fix in3.1.3 is for
> 
> http://www.openwall.com/lists/oss-security/2011/10/05/10
> 
> And there are CVEs pending :
> 
> https://0ang3el.blogspot.com/2016/07/beware-of-ws-xmlrpc-library-in-y
> our.html
> 
> Other TLPs might be affected, I guess Archiva has been picked because
> being the 1st in alphabetical order...
> 
> HTH
> 
> Jacques
> 
> 
> Le 19/07/2018 à 17:25, Bernhard Donaubauer a écrit :
> > Hello,
> > 
> > I think about replacing an old xml-rpc service written in perl with
> > groovy.
> > 
> > There are examples using groovy-xmlrpc like here:
> > https://gist.github.com/bjfish/370521
> > 
> > But I wonder if this module is still maintained. While I can find
> > the
> > jar files in the repositories I can't find the according project or
> > sources.
> > 
> > Regards,
> > Bernhard Donaubauer
> > 
> 
> 
-- 
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk

Mime
View raw message