Uh oh!
There was an error while loading.Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork33.7k
gh-61441: XML entity expansion limitation#9265
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
Uh oh!
There was an error while loading.Please reload this page.
Conversation
vstinner commentedSep 13, 2018
I would prefer to see this change made in expat upstream. We should vendor an unmodified version of expat. |
tiran commentedSep 13, 2018
That's the plan. |
a172a25 to053db1dComparezooba commentedSep 17, 2018
Since we ship the vendored one as part of the Windows release, I'd be happy to have this merged for 3.7.1 while we wait for the patch to go upstream. This is not our public API, so even if they upstream a different version of it, that won't affect us. |
6a51752 to2cffc90CompareModelled afterhttps://github.com/GNOME/libxml2/blob/v2.9.8/parser.c#L99Signed-off-by: Christian Heimes <christian@python.org>
2cffc90 to504e092Comparematrixise commentedSep 10, 2019
@tiran maybe we could close this issue, +- 1y and I suppose |
arhadthedev commentedMar 30, 2022
@tiran Is the PR still relevant? |
| typedefstruct { | ||
| ENTITY*first_entity; | ||
| unsignedintentitiesNestingLevel; | ||
| size_tnestedEntitiesExpansionSize;/* in bytes, not XML_Cha) */ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others.Learn more.
| size_tnestedEntitiesExpansionSize;/* in bytes, notXML_Cha) */ | |
| size_tnestedEntitiesExpansionSize;/* in bytes, notXML_Char */ |
This PR is stale because it has been open for 30 days with no activity. |
gpshead commentedMay 24, 2025
closing as external entity expansion was disabled in sax other PRs (see issue) |
Uh oh!
There was an error while loading.Please reload this page.
Modelled afterhttps://github.com/GNOME/libxml2/blob/v2.9.8/parser.c#L99
Signed-off-by: Christian Heimeschristian@python.org
https://bugs.python.org/issue17239