Changelog

sparklemotion · Jun 8, 2012 · a5770a0 · a5770a0
1 parent 6d93d73
commit a5770a0
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.ja.rdoc b/CHANGELOG.ja.rdoc
@@ -10,6 +10,9 @@
 
   * Segmentation fault when creating a comment node for a DocumentFragment. #677, #678.
   * Treat '.' as xpath in at() and search(). #690
+  * [MRI] [Security] Default parse options for XML documents were
+    changed to not make network connections during document parsing,
+    to avoid XXE vulnerability. #693
 
 
 == 1.5.3 / 2012-06-01

diff --git a/CHANGELOG.rdoc b/CHANGELOG.rdoc
@@ -10,7 +10,9 @@
 
   * Segmentation fault when creating a comment node for a DocumentFragment. #677, #678.
   * Treat '.' as xpath in at() and search(). #690
-
+  * [MRI] [Security] Default parse options for XML documents were
+    changed to not make network connections during document parsing,
+    to avoid XXE vulnerability. #693
 
 == 1.5.3 / 2012-06-01