]> git.evergreen-ils.org Git - working/NCIPServer.git/commit
projects / working / NCIPServer.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b7d7ab7) | patch
Check for external XML entities in NCIP.pm.
authorJason Stephenson <jason@sigio.com>
Thu, 3 Nov 2016 14:12:19 +0000 (10:12 -0400)
committerJason Stephenson <jason@sigio.com>
Thu, 3 Nov 2016 14:12:19 +0000 (10:12 -0400)
commit0dabe8af9ef69bca3d9980f251d141f66d3fbaea
tree2be7575513e779b97b3c153e40b92de2b761528ctree
parentb7d7ab764a76b07fd2a853c504813ccc076b5abacommit | diff
Check for external XML entities in NCIP.pm.

Add an external entity handler to DOM creation in the main NCIP
module's handle_initiation function.  This handler dies and the error
processing catches that error, logs that a possible XXE attack was
detected and then returns undef.

Signed-off-by: Jason Stephenson <jason@sigio.com>
lib/NCIP.pm diff | blob | history
NCIP Server