You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Improved namespace conflicted attribute check performance. It was
too slow for deep elements.
Reported by l33thaxor.
Fixes
Fixed a bug that default entity expansions are counted for
security check. Default entity expansions should not be counted
because they don't have a security risk.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Improvements
Removed duplicated entity expansions for performance.
BaseParser#unnormalize#194Improved namespace conflicted attribute check performance. It was
too slow for deep elements.
Fixes
Fixed a bug that default entity expansions are counted for
security check. Default entity expansions should not be counted
because they don't have a security risk.
REXML::Parsers::BaseParserafter 3.3.3 #198REXML::Parsers::BaseParserfor valid feeds #199Fixed a parser bug that parameter entity references in internal
subsets are expanded. It's not allowed in the XML specification.
Fixed a stream parser bug that user-defined entity references in
text aren't expanded.
Thanks
Viktor Ivarsson
NAITOH Jun
l33thaxor
This discussion was created from the release REXML 3.3.6 - 2024-08-22.
Beta Was this translation helpful? Give feedback.
All reactions