hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Completely disable xml entity resolution

Browse source
This commit is contained in:
mae 2023-08-05 14:13:49 +02:00
commit 48b1e9bdc7
4 changed files with 22 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
test/pleroma/web/xml_test.exs
View file

@ -3,6 +3,11 @@ defmodule Pleroma.Web.XMLTest do
alias Pleroma.Web.XML
test "refuses to parse any entities from XML" do
data = File.read!("test/fixtures/xml_billion_laughs.xml")
assert(:error == XML.parse_document(data))
end
test "refuses to load external entities from XML" do
data = File.read!("test/fixtures/xml_external_entities.xml")
assert(:error == XML.parse_document(data))