29783228417
66%
master: 65%

Ran 20 Jul 2026 10:23PM UTC

Jobs 1

Files 804

Run time 1min

Badge

Embed ▾

Committed 20 Jul 2026 10:14PM UTC coverage: 66.047% (+0.002%) from 66.045%

Build # 29783228417

Build Type

push

github

Committed by

web-flow

Commit Message

Use PipeParser for inbound HL7 to remove XML/XXE attack surface (#6320)

Backport of #6223 to 2.8.x.

The hL7Parser bean was a HAPI GenericParser, which auto-detects message
encoding and routes XML-encoded payloads to HAPI's XML parser. On
hapi-base 2.1 that parser builds an unhardened LSParser (no
disallow-doctype-decl, external general/parameter entities enabled),
exposing XML external entity (XXE) processing: external file reads, SSRF
and entity-expansion DoS. Inbound HL7 parsing runs before authorization,
so the surface is reachable pre-auth.

OpenMRS only ever produces and consumes pipe-delimited (ER7) HL7v2, so the
XML branch is unused. Switch the bean to PipeParser, which rejects XML
payloads outright with an unsupported-encoding error. The HL7ServiceImpl
parser field and setter are widened to the common Parser supertype so the
existing XML setter injection still resolves. Adds a regression test.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Coverage Stats

24314 of 36813 relevant lines covered (66.05%)

0.66 hits per line

Coverage Regressions

Lines	Coverage	∆	File
2	93.55	1.08%	api/src/main/java/org/openmrs/validator/PatientProgramValidator.java
1	98.85	-1.15%	api/src/main/java/org/openmrs/ConceptNumeric.java
1	88.89	-3.7%	api/src/main/java/org/openmrs/RelationshipType.java
1	85.29	-1.47%	api/src/main/java/org/openmrs/util/HandlerUtil.java

Jobs

ID	Job ID	Ran	Files	Coverage
1	29783228417.1	20 Jul 2026 10:23PM UTC	804	66.05

openmrs / openmrs-core / 29783228417
66%
master: 65%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 29783228417

openmrs / openmrs-core / 29783228417 66% master: 65%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 29783228417

openmrs / openmrs-core / 29783228417
66%
master: 65%

README BADGES
x