17b1d5d4e36aa57a9b25a0e694affbd1ee637e45 - platform/external/python/cpython3

commit	17b1d5d4e36aa57a9b25a0e694affbd1ee637e45	[log] [tgz]
author	Christian Heimes <christian@python.org>	Sun Sep 23 09:50:25 2018 +0200
committer	Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>	Sun Sep 23 00:50:25 2018 -0700
tree	486acd3328d5e607bd05936fdfb73eb548d4fa90
parent	9fb051f032c36b9f6086b79086b4d6b7755a3d70 [diff]

bpo-17239: Disable external entities in SAX parser (GH-9217)



The SAX parser no longer processes general external entities by default
to increase security. Before, the parser created network connections
to fetch remote files or loaded local files from the file system for DTD
and entities.

Signed-off-by: Christian Heimes <christian@python.org>



https://bugs.python.org/issue17239

Doc/library/xml.dom.pulldom.rst[diff]
Doc/library/xml.rst[diff]
Doc/library/xml.sax.rst[diff]
Doc/whatsnew/3.8.rst[diff]
Lib/test/test_pulldom.py[diff]
Lib/test/test_sax.py[diff]
Lib/test/test_xml_etree.py[diff]
Lib/xml/sax/expatreader.py[diff]
Misc/NEWS.d/next/Security/2018-09-11-18-30-55.bpo-17239.kOpwK2.rst[Added - diff]

9 files changed

tree: 486acd3328d5e607bd05936fdfb73eb548d4fa90