kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2026-07-09 07:57:05 -07:00
Code Issues Packages Projects Releases Wiki Activity
Files
e9fc5b041fcc236f1d6b24394a2d514b50705e7d
asterisk/main/xml.c
T
George Joseph 640677c9d8 xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile. 
The xmlReadFile XML_PARSE_NOENT flag, which allows parsing of external
entities, could allow a potential XXE injection attack.  Replacing it with
XML_PARSE_NONET, which prevents network access, is safer.

Resolves: #GHSA-85x7-54wr-vh42
2026-02-05 08:39:44 -07:00

14 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink