Prevent XXE (3x) (neo-project#1229)

Tommo-L · Jun 22, 2020 · a1c2aef · a1c2aef
1 parent a3bd55f
commit a1c2aef
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/neo/Network/UPnP.cs b/neo/Network/UPnP.cs
@@ -76,7 +76,7 @@ private static string GetServiceUrl(string resp)
         {
             try
             {
-                XmlDocument desc = new XmlDocument();
+                XmlDocument desc = new XmlDocument() { XmlResolver = null };
                 HttpWebRequest request = WebRequest.CreateHttp(resp);
                 using (WebResponse response = request.GetResponse())
                 {
@@ -155,7 +155,7 @@ private static XmlDocument SOAPRequest(string url, string soap, string function)
             using (Stream reqs = r.GetRequestStream())
             {
                 reqs.Write(b, 0, b.Length);
-                XmlDocument resp = new XmlDocument();
+                XmlDocument resp = new XmlDocument() { XmlResolver = null };
                 WebResponse wres = r.GetResponse();
                 using (Stream ress = wres.GetResponseStream())
                 {