security-and-privacy/mat2
security-and-privacy
/
mat2
mirror of
1
0
Fork 0
Code Releases Activity

Add defusedxml as an (optional) way to prevent XML-based attacks 

Those attacks are DoS-only.
This commit is contained in:
jvoisin 2018-07-08 17:07:26 +02:00
parent 72e1fda18d
commit f9bc022c96
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
libmat2/office.py
View File

@ -4,8 +4,11 @@ import shutil
import tempfile import tempfile
import datetime import datetime
import zipfile import zipfile
import xml.etree.ElementTree as ET
from typing import Dict, Set, Pattern from typing import Dict, Set, Pattern
try: # protect against DoS
from defusedxml import ElementTree as ET
except ImportError:
import xml.etree.ElementTree as ET
from . import abstract, parser_factory from . import abstract, parser_factory