xml4h

xml4h copied to clipboard

Avoid external entity security vulnerability by rejecting XML docs with entities in lxml parsing

2

Raise an exception if a document containing entities is parsed by the underlying lxml library, since malicious entity declarations could be used to expose the content of arbitrary local files....

jmurty

Contact

1

Hi team, I've contacted you via email, please let me know if you've received my email. Thanks

danielelkabes

Provide tools or helpers of some kind to make it very easy to perform SAX parsing. Need to figure out exactly what this feature's goals should be, and crib examples...

jmurty

Add proper support for the more esoteric node types: DocumentType, DocumentFragment, Notation, Entity, EntityReference etc

jmurty

Think about improving the NodeList implementation for children, entities, notations, etc to allow for simple and intuitive interactions with lists of nodes, such as add/remove nodes directly via the nodelist...

jmurty

Find a way to make the _lxml_ `nsmap` namespace map mutable, perhaps with brute force? This is necessary to properly abstract namespace definition behaviour, so that defining namespaces with `xmlns`...

jmurty