pleroma

commit: 6d48b0f1a93a5a44b95497063e885342240fbc27
parent 307692cee8cdd0dbe3e6cf40c1192fcf43910610
Author: Mark Felder <feld@feld.me>
Date:   Fri,  4 Aug 2023 22:44:09 -0400

Document and test that XXE processing is disabled

https://vuln.be/post/xxe-in-erlang-and-elixir/

Diffstat:
A
changelog.d/akkoma-xml-remote-entities.security
1
+

1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/changelog.d/akkoma-xml-remote-entities.security b/changelog.d/akkoma-xml-remote-entities.security
@@ -0,0 +1 @@
+Restrict XML parser from processing external entitites (XXE)