logo

pleroma

My custom branche(s) on git.pleroma.social/pleroma/pleroma git clone https://hacktivis.me/git/pleroma.git
commit: cc848b78dca51fcd7e785eb92a7a3a4d5d1c419e
parent 77d57c974ad83fcea77e424d53dc16a27e5d88b6
Author: Mark Felder <feld@feld.me>
Date:   Fri,  4 Aug 2023 22:44:09 -0400

Document and test that XXE processing is disabled

https://vuln.be/post/xxe-in-erlang-and-elixir/

Diffstat:

Achangelog.d/akkoma-xml-remote-entities.security1+
1 file changed, 1 insertion(+), 0 deletions(-)

diff --git a/changelog.d/akkoma-xml-remote-entities.security b/changelog.d/akkoma-xml-remote-entities.security @@ -0,0 +1 @@ +Restrict XML parser from processing external entitites (XXE)