This repository has been archived by the owner on Jan 25, 2023. It is now read-only.

Fix 8 Security issues in multiple files related to xml.dom.minidom #6

Open

codefactor-io bot opened this issue Aug 13, 2019 · 0 comments

Labels

good first issue hacktoberfest Security

codefactor-io bot commented Aug 13, 2019

CodeFactor found multiple issues:

Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called

docs\doxygen\doxyxml\generated\compoundsuper.py:8317
docs\doxygen\doxyxml\generated\compoundsuper.py:8291
docs\doxygen\doxyxml\generated\indexsuper.py:496
docs\doxygen\doxyxml\generated\indexsuper.py:470
docs\doxygen\doxyxml\generated\compound.py:497
docs\doxygen\doxyxml\generated\index.py:71

Using xml.dom.minidom.parseString to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parseString with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called

docs\doxygen\doxyxml\generated\compoundsuper.py:8304
docs\doxygen\doxyxml\generated\indexsuper.py:483

zkoppert added the bug label

zkoppert added Security and removed bug labels

zkoppert added good first issue hacktoberfest labels

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.