[java-sig-commits] [Bug 1102038] CVE-2014-0119 Tomcat/JBossWeb: XML parser hijack by malicious web application