projects / Sone.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0a63a69) | patch
🔒️ Fix XXE vulnerability and add test
authorDavid ‘Bombe’ Roden <bombe@pterodactylus.net>
Sun, 4 Oct 2026 15:31:57 +0000 (17:31 +0200)
committerDavid ‘Bombe’ Roden <bombe@pterodactylus.net>
Sun, 4 Oct 2026 17:21:16 +0000 (19:21 +0200)
commit96d06b0ab848d5f004b3d56bdd498ce057425c0d
treebd4db3bd456b49e804ecbb4a66f24afce2757376tree | snapshot
parent0a63a6912659d95d3dafb13290753750a4cd2ee6commit | diff
🔒️ Fix XXE vulnerability and add test

While the parser in its configuration was vulnerable to XXE, you could only
ever manipulate XML files that you inserted, and it was never possible to force
other Sone instances to re-export any data from your modified XML files.
build.gradle diff | blob | history
src/test/kotlin/net/pterodactylus/sone/core/SoneParserTest.kt diff | blob | history
Sone – The Social Network plugin for Freenet