Disable XXE processing in Libxml
A fix for a security vulnerability reported by Maximilian Hils.
This commit is contained in:
1 parent
3b2a09a1da
commit
88a50a3387
1 file changed
-1
@@ -64,7 +64,6 @@ const NAMESPACES = {
|
|||||||
|
|
||||||
const LIBXMLJS_PARSE_OPTIONS = {
|
const LIBXMLJS_PARSE_OPTIONS = {
|
||||||
"nocdata": true,
|
"nocdata": true,
|
||||||
"noent": true,
|
|
||||||
"recover": config.get("XML_RECOVER"),
|
"recover": config.get("XML_RECOVER"),
|
||||||
"ignore_enc": config.get("XML_IGNORE_ENC")
|
"ignore_enc": config.get("XML_IGNORE_ENC")
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in new issue
Block a user