mirror of
https://github.com/github/codeql.git
synced 2026-03-16 12:36:55 +01:00
21 lines
957 B
Ruby
21 lines
957 B
Ruby
class LibXmlRubyXXE < ApplicationController
|
|
|
|
content = params[:xml]
|
|
LibXML::XML::Document.string(content, { options: 2 | 2048, encoding: 'utf-8' })
|
|
LibXML::XML::Document.file(content, { options: LibXML::XML::Parser::Options::NOENT | 2048})
|
|
LibXML::XML::Document.io(content, { options: XML::Parser::Options::NOENT | 2048 })
|
|
LibXML::XML::Parser.string(content, { options: 2 | 2048 })
|
|
LibXML::XML::Parser.file(content, { options: 3 | 2048 })
|
|
LibXML::XML::Parser.io(content, { options: 2 | 2048})
|
|
|
|
XML::Document.string(content, { options: 2 | 2048 })
|
|
XML::Parser.string(content, { options: 2 | 2048 })
|
|
|
|
LibXML::XML::Parser.file(content, { options: 2048 }) # OK
|
|
|
|
Hash.from_xml(content) # OK - entity substitution is disabled by default
|
|
Hash.from_trusted_xml(content) # OK - entity substitution is disabled by default
|
|
ActiveSupport::XmlMini.parse(content) # OK - entity substitution is disabled by default
|
|
|
|
end
|