class

Flaw::XmlExternalEntity

Inherits Flaw::Rule < Reference < Object

FLAW014 — XXE. XML::Reader / XML.parse with untrusted input and default libxml2 flags (which resolve external entities).

Constants

PATTERNS = [/\bXML\.parse\s*\(/, /\bXML::Reader\.new\s*\(/]
SAFE_HINT = /NONET|NOENT|noent: *false/

Instance methods

check(source : String, path : String) : Array(Finding)
Source
default_severity
Source
description
Source
title
Source