mirror of
https://github.com/github/codeql.git
synced 2026-07-28 06:21:59 +02:00
21 lines
1.0 KiB
Ruby
21 lines
1.0 KiB
Ruby
class LibXmlRubyXXE < ApplicationController
|
|
|
|
content = params[:xml] # $ Source
|
|
LibXML::XML::Document.string(content, { options: 2 | 2048, encoding: 'utf-8' }) # $ Alert
|
|
LibXML::XML::Document.file(content, { options: LibXML::XML::Parser::Options::NOENT | 2048}) # $ Alert
|
|
LibXML::XML::Document.io(content, { options: XML::Parser::Options::NOENT | 2048 }) # $ Alert
|
|
LibXML::XML::Parser.string(content, { options: 2 | 2048 }) # $ Alert
|
|
LibXML::XML::Parser.file(content, { options: 3 | 2048 }) # $ Alert
|
|
LibXML::XML::Parser.io(content, { options: 2 | 2048}) # $ Alert
|
|
|
|
XML::Document.string(content, { options: 2 | 2048 }) # $ Alert
|
|
XML::Parser.string(content, { options: 2 | 2048 }) # $ Alert
|
|
|
|
LibXML::XML::Parser.file(content, { options: 2048 }) # OK
|
|
|
|
Hash.from_xml(content) # OK - entity substitution is disabled by default
|
|
Hash.from_trusted_xml(content) # OK - entity substitution is disabled by default
|
|
ActiveSupport::XmlMini.parse(content) # OK - entity substitution is disabled by default
|
|
|
|
end
|