Verify forbidden chars inside cdata and escaped chars!

esl · May 31, 2022 · cc1bdba · cc1bdba
1 parent ef7018f
commit cc1bdba
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/c_src/rapidxml.hpp b/c_src/rapidxml.hpp
@@ -2063,6 +2063,7 @@ namespace rapidxml
                 }
 
                 // No replacement, only copy character
+                check_control<control_points_pred, Flags>(src);
                 *dest++ = *src++;
 
             }

diff --git a/test/exml_properties_tests.erl b/test/exml_properties_tests.erl
@@ -19,6 +19,10 @@ vector_2_forbidden_control_char_test() ->
 vector_3_forbidden_control_char_test() ->
     ?assertMatch({error, _}, exml:parse(<<"<body lang='en' bad='", 16#1B, "'></body>">>)).
 
+vector_4_forbidden_control_char_test() ->
+    ?assertMatch({error, _},
+                 exml:parse(<<"<message to='alice@localhost'><body>&amp;lt;body&amp;gt;", 16#1B,"&amp;lt;/body&amp;gt;</body></body>">>)).
+
 fail_forbidden_control_char_test() ->
     p("All valid xml cdata can be parsed",
       ?FORALL(Doc, utf8_doc_bad(),