|
Server : Apache System : Linux cloud.heroica.com.br 4.18.0-553.36.1.el8_10.x86_64 #1 SMP Wed Jan 22 03:07:54 EST 2025 x86_64 User : farolpborg ( 1053) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /usr/share/doc/python3-defusedxml/ |
Upload File : |
Changelog ========= defusedxml 0.6.0 ---------------- *Release date: 17-Apr-2019* - Increase test coverage. - Add badges to README. defusedxml 0.6.0rc1 ------------------- *Release date: 14-Apr-2019* - Test on Python 3.7 stable and 3.8-dev - Drop support for Python 3.4 - No longer pass *html* argument to XMLParse. It has been deprecated and ignored for a long time. The DefusedXMLParser still takes a html argument. A deprecation warning is issued when the argument is False and a TypeError when it's True. - defusedxml now fails early when pyexpat stdlib module is not available or broken. - defusedxml.ElementTree.__all__ now lists ParseError as public attribute. - The defusedxml.ElementTree and defusedxml.cElementTree modules had a typo and used XMLParse instead of XMLParser as an alias for DefusedXMLParser. Both the old and fixed name are now available. defusedxml 0.5.0 ---------------- *Release date: 07-Feb-2017* - No changes defusedxml 0.5.0.rc1 -------------------- *Release date: 28-Jan-2017* - Add compatibility with Python 3.6 - Drop support for Python 2.6, 3.1, 3.2, 3.3 - Fix lxml tests (XMLSyntaxError: Detected an entity reference loop) defusedxml 0.4.1 ---------------- *Release date: 28-Mar-2013* - Add more demo exploits, e.g. python_external.py and Xalan XSLT demos. - Improved documentation. defusedxml 0.4 -------------- *Release date: 25-Feb-2013* - As per http://seclists.org/oss-sec/2013/q1/340 please REJECT CVE-2013-0278, CVE-2013-0279 and CVE-2013-0280 and use CVE-2013-1664, CVE-2013-1665 for OpenStack/etc. - Add missing parser_list argument to sax.make_parser(). The argument is ignored, though. (thanks to Florian Apolloner) - Add demo exploit for external entity attack on Python's SAX parser, XML-RPC and WebDAV. defusedxml 0.3 -------------- *Release date: 19-Feb-2013* - Improve documentation defusedxml 0.2 -------------- *Release date: 15-Feb-2013* - Rename ExternalEntitiesForbidden to ExternalReferenceForbidden - Rename defusedxml.lxml.check_dtd() to check_docinfo() - Unify argument names in callbacks - Add arguments and formatted representation to exceptions - Add forbid_external argument to all functions and classes - More tests - LOTS of documentation - Add example code for other languages (Ruby, Perl, PHP) and parsers (Genshi) - Add protection against XML and gzip attacks to xmlrpclib defusedxml 0.1 -------------- *Release date: 08-Feb-2013* - Initial and internal release for PSRT review