Skip to content
This repository has been archived by the owner on Jan 25, 2023. It is now read-only.

minidom xml swap for defuseddom #48

Open
zkoppert opened this issue Aug 23, 2019 · 0 comments
Open

minidom xml swap for defuseddom #48

zkoppert opened this issue Aug 23, 2019 · 0 comments
Labels
good first issue Good for newcomers hacktoberfest Great issues that are ready for new contributors to work on Security Security Concern

Comments

@zkoppert
Copy link
Contributor

CodeFactor found multiple issues last seen at 33ec9b7:

Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called

docs\doxygen\doxyxml\generated\compoundsuper.py:8291
docs\doxygen\doxyxml\generated\compoundsuper.py:8317
docs\doxygen\doxyxml\generated\indexsuper.py:496
docs\doxygen\doxyxml\generated\indexsuper.py:470
docs\doxygen\doxyxml\generated\compound.py:497
docs\doxygen\doxyxml\generated\index.py:71

Using xml.dom.minidom.parseString to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parseString with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called

docs\doxygen\doxyxml\generated\compoundsuper.py:8304
docs\doxygen\doxyxml\generated\indexsuper.py:483

@zkoppert zkoppert added the bug Something isn't working label Aug 23, 2019
@zkoppert zkoppert added Security Security Concern and removed bug Something isn't working labels Sep 5, 2019
@zkoppert zkoppert added good first issue Good for newcomers hacktoberfest Great issues that are ready for new contributors to work on labels Sep 25, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
good first issue Good for newcomers hacktoberfest Great issues that are ready for new contributors to work on Security Security Concern
Projects
None yet
Development

No branches or pull requests

1 participant