XML External Entity (ARCH9105)
Ce contenu n’est pas encore disponible dans votre langue.
Key swift.security.xxe · Severity error · Category security · CWE CWE-611
Flags XMLParser with shouldResolveExternalEntities = true and libxml2 parsing with XML_PARSE_NOENT / DTDLOAD.
Incorrect
Section titled “Incorrect”parser.shouldResolveExternalEntities = trueCorrect
Section titled “Correct”parser.shouldResolveExternalEntities = falseLeave external entity resolution off.