Disable XXE processing in Libxml
A fix for a security vulnerability reported by Maximilian Hils.
This commit is contained in:
1 parent
3b2a09a1da
commit
88a50a3387
1 file changed
-1
@@ -64,7 +64,6 @@ const NAMESPACES = {
|
||||
|
||||
const LIBXMLJS_PARSE_OPTIONS = {
|
||||
"nocdata": true,
|
||||
"noent": true,
|
||||
"recover": config.get("XML_RECOVER"),
|
||||
"ignore_enc": config.get("XML_IGNORE_ENC")
|
||||
};
|
||||
|
||||
Reference in new issue
Block a user