Bugzilla – Attachment 95453 Details for
Bug 23290
XSLT system preferences allow administrators to exploit XML and XSLT vulnerabilities
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 23290: Allow enabling expand_entities
Bug-23290-Allow-enabling-expandentities.patch (text/plain), 997 bytes, created by
Marcel de Rooy
on 2019-11-15 12:45:02 UTC
(
hide
)
Description:
Bug 23290: Allow enabling expand_entities
Filename:
MIME Type:
Creator:
Marcel de Rooy
Created:
2019-11-15 12:45:02 UTC
Size:
997 bytes
patch
obsolete
>From bff243190bff2bec96004c4e50aeeaf76e5ba5f3 Mon Sep 17 00:00:00 2001 >From: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >Date: Fri, 15 Nov 2019 12:41:32 +0000 >Subject: [PATCH] Bug 23290: Allow enabling expand_entities >Content-Type: text/plain; charset=utf-8 > >Since libxml2 disables it now by default, we need to enable it for testing. >--- > Koha/XSLT/Security.pm | 5 +++-- > 1 file changed, 3 insertions(+), 2 deletions(-) > >diff --git a/Koha/XSLT/Security.pm b/Koha/XSLT/Security.pm >index 720c71c7fd..6c75458b02 100644 >--- a/Koha/XSLT/Security.pm >+++ b/Koha/XSLT/Security.pm >@@ -144,8 +144,9 @@ sub set_parser_options { > my $conf = $self->{_options}; > return if !$conf; > >- if( exists $conf->{expand_entities} && $conf->{expand_entities} eq '0' ) { >- # we only disable expanding, if we find an explicit 0 >+ if( $conf->{expand_entities} ) { >+ _set_option($parser, 'expand_entities', 1); >+ } else { > _set_option($parser, 'expand_entities', 0); > } > } >-- >2.11.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 23290
:
91435
|
91437
|
95450
|
95451
|
95452
|
95453
|
95454
|
95475
|
95478
|
95480
|
95481
|
95482
|
95483
|
95484
|
95485
|
95551
|
96299
|
96300
|
96301
|
96302
|
96303
|
96304
|
97606
|
97607
|
97608
|
97609
|
97610
|
97611
|
97612
|
97613
|
97614
|
97615
|
97616
|
97617
|
97618
|
97619
|
97620
|
97871
|
97978
|
97980
|
98397
|
98398
|
98399
|
98400
|
98401
|
98402
|
98403
|
98404
|
98405
|
98406
|
99587