public
Description: This is the gem containing the monkeypatch fix for REXML
Homepage:
Clone URL: git://github.com/NZKoz/rexml-expansion-fix.git
name age message
file .gitignore Fri Aug 22 06:00:42 -0700 2008 Initial fix [NZKoz]
file LICENSE Fri Aug 22 06:00:42 -0700 2008 Initial fix [NZKoz]
file README.textile Fri Aug 22 06:00:42 -0700 2008 Initial fix [NZKoz]
file example.xml Fri Aug 22 06:00:42 -0700 2008 Initial fix [NZKoz]
directory lib/ Sun Aug 31 09:41:33 -0700 2008 Handle a bug which prevented parsing in some ci... [NZKoz]
file rexml-expansion-fix.gemspec Sun Aug 31 09:41:33 -0700 2008 Handle a bug which prevented parsing in some ci... [NZKoz]
README.textile

REXML Expansion Fix

The version of rexml which ships with ruby at present will not restrict the total number of entity expanstions when processing inline attributes. This can allow specially crafted documents to consume enormous amounts of CPU. To prevent this from happening this fix causes processing to abort processing after a certain number of expansions have taken place. The limit defaults to 10000 but you can change it as follows:

REXML::Document.entity_expansion_limit= 50

The example xml in example.xml can be used to verify that your application is safe.