mirror of
https://github.com/github/codeql.git
synced 2025-12-21 19:26:31 +01:00
spelling: although
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
This commit is contained in:
@@ -38,7 +38,7 @@ default parser</a> from <code>lxml.etree</code> allows local external entities t
|
||||
<p>
|
||||
To guard against XXE attacks with the <code>lxml</code> library, you should create a
|
||||
parser with <code>resolve_entities</code> set to <code>false</code>. This means that no
|
||||
entity expansion is undertaken, althuogh standard predefined entities such as
|
||||
entity expansion is undertaken, although standard predefined entities such as
|
||||
<code>&gt;</code>, for writing <code>></code> inside the text of an XML element,
|
||||
are still allowed.
|
||||
</p>
|
||||
|
||||
Reference in New Issue
Block a user