https://github.com/FasterXML/jackson-core/blob/2.16/src/main/java/com/fasterxml/jackson/core/StreamReadConstraints.java
First: some limits do work
is enforced by XML parser itself, and
maxNumberLengthmaxStringLengthmaxNestingDepth
are enforced by core ParserMinimalBase.
This leaves:
Woodstox has its own way to enforce limits and users who need to enforce that should use jackson-dataformat-xml with woodstox as the XML Stream Reader. See https://cowtowncoder.medium.com/configuring-woodstox-xml-parser-woodstox-specific-properties-1ce5030a5173 and the part about P_MAX_ELEMENT_DEPTH.
maxDocumentLength could be enforced similarly - see P_MAX_CHARACTERS
https://github.com/FasterXML/jackson-core/blob/2.16/src/main/java/com/fasterxml/jackson/core/StreamReadConstraints.java
First: some limits do work
maxTokenCountis enforced by XML parser itself, and
maxNumberLengthmaxStringLengthmaxNestingDepthare enforced by core
ParserMinimalBase.This leaves:
maxDocumentLengthWoodstox has its own way to enforce limits and users who need to enforce that should use jackson-dataformat-xml with woodstox as the XML Stream Reader. See https://cowtowncoder.medium.com/configuring-woodstox-xml-parser-woodstox-specific-properties-1ce5030a5173 and the part about P_MAX_ELEMENT_DEPTH.
maxDocumentLengthcould be enforced similarly - see P_MAX_CHARACTERS