AkkomaGang/akkoma
AkkomaGang/akkoma
17
70
Fork 119
Code Issues 148 Pull requests 16 Projects 2 Releases 24 Packages Wiki Activity

Completely disable xml entity resolution #614

Merged
floatingghost merged 1 commit from MaeIsBad/akkoma:completely-disable-xml-entity-resolution into develop 2023-08-05 12:36:29 +00:00
Conversation 2 Commits 1 Files changed 4 +22 -2
MaeIsBad commented 2023-08-05 12:31:56 +00:00
Contributor
Copy link

I misunderstood how the fetch_fun option on xmerl_scan.string worked. While the previous patch was sufficient to prevent reading local files it still could be DOSed with a billion laughs attack.

I misunderstood how the fetch_fun option on xmerl_scan.string worked. While the previous patch was sufficient to prevent reading local files it still could be DOSed with a billion laughs attack.
MaeIsBad force-pushed completely-disable-xml-entity-resolution from 1c9ca126d9
Some checks are pending
ci/woodpecker/pr/build-amd64 Pipeline is pending
Details
ci/woodpecker/pr/build-arm64 Pipeline is pending
Details
ci/woodpecker/pr/docs Pipeline is pending
Details
ci/woodpecker/pr/test Pipeline is pending
Details
to d868348fac
Some checks are pending
ci/woodpecker/pr/build-amd64 Pipeline is pending
Details
ci/woodpecker/pr/build-arm64 Pipeline is pending
Details
ci/woodpecker/pr/docs Pipeline is pending
Details
ci/woodpecker/pr/test Pipeline is pending
Details
2023-08-05 12:32:08 +00:00 Compare
floatingghost commented 2023-08-05 12:32:48 +00:00
Owner
Copy link

wowee cutting it CLOOOOSE on this one, i was literally just putting the release out - thanks a lot!

wowee cutting it CLOOOOSE on this one, i was literally just putting the release out - thanks a lot!
❤️ 1
floatingghost commented 2023-08-05 12:36:25 +00:00
Owner
Copy link

all tests pass, good by me!

all tests pass, good by me!
floatingghost deleted branch completely-disable-xml-entity-resolution 2023-08-05 12:36:30 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
approved, awaiting change

   
broken setup

Issue arose from a misconfiguration by the admin, custom patches, manual db edits or similar

  
bug

Something is not working

  
cannot reproduce

   
configuration

This requires config changes

  
documentation

This is about human-readable docs

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
extremely low priority

   
feature request

Something new?

  
Fix it yourself

Support has been attempted

  
help wanted

Need some help

  
invalid

Something is wrong

  
mastodon_api

   
needs change/feedback

Issue or PR is stalled on response from the author or a third party

  
needs docs

   
needs tests

   
not a bug

   
not our bug

Bug in a dependency of ours (meaning we can't just fix it), or in another AP implementation or client interfacing with Akkoma (which needs to be fixed on their end)

  
planned

   
pleroma_api

   
privacy

   
question

More information is needed

  
static_fe

   
triage

   
wontfix

This won't be fixed

No labels
approved, awaiting change
broken setup
bug
cannot reproduce
configuration
documentation
duplicate
enhancement
extremely low priority
feature request
Fix it yourself
help wanted
invalid
mastodon_api
needs change/feedback
needs docs
needs tests
not a bug
not our bug
planned
pleroma_api
privacy
question
static_fe
triage
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
AkkomaGang/akkoma!614
No description provided.