From 88a50a3387d218bdfe5917a9e2e33304d17bf01e Mon Sep 17 00:00:00 2001 From: Zaid Abdulla Date: Sun, 7 Jan 2018 00:05:36 -0800 Subject: [PATCH] Disable XXE processing in Libxml A fix for a security vulnerability reported by Maximilian Hils. --- lib/soap.js | 1 - 1 file changed, 1 deletion(-) diff --git a/lib/soap.js b/lib/soap.js index 5ebdf3c..481b781 100644 --- a/lib/soap.js +++ b/lib/soap.js @@ -64,7 +64,6 @@ const NAMESPACES = { const LIBXMLJS_PARSE_OPTIONS = { "nocdata": true, - "noent": true, "recover": config.get("XML_RECOVER"), "ignore_enc": config.get("XML_IGNORE_ENC") };