Change RestrictiveXamlXmlReader to use an allow list · dotnet/wpf@7b0be4d · GitHub

Commit

Change RestrictiveXamlXmlReader to use an allow list

Browse files

- Removes the old deny list logic used by RestrictiveXamlXmlReader
- Provides an extensible (via registry) allow list mechanism

Ported from release/7.0 branch.
Fixes CVE-2022-41089.

Loading branch information

GrabYourPitchforks committed Nov 7, 2022

1 parent 477dd33 commit 7b0be4d