commit: cc848b78dca51fcd7e785eb92a7a3a4d5d1c419e
parent 77d57c974ad83fcea77e424d53dc16a27e5d88b6
Author: Mark Felder <feld@feld.me>
Date: Fri, 4 Aug 2023 22:44:09 -0400
Document and test that XXE processing is disabled
https://vuln.be/post/xxe-in-erlang-and-elixir/
Diffstat:
1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/changelog.d/akkoma-xml-remote-entities.security b/changelog.d/akkoma-xml-remote-entities.security
@@ -0,0 +1 @@
+Restrict XML parser from processing external entitites (XXE)