Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6129193 commit 3affa6cCopy full SHA for 3affa6c
1 file changed
python/ql/test/experimental/query-tests/Security/CWE-611/xml_to_dict.py
@@ -8,10 +8,10 @@
8
def xmltodict_parse():
9
xml_content = request.args['xml_content']
10
11
- return xmltodict.parse(xml_content)
+ return xmltodict.parse(xml_content) # OK
12
13
@app.route("/xmltodict.parse2")
14
def xmltodict_parse2():
15
16
17
- return xmltodict.parse(xml_content, disable_entities=False)
+ return xmltodict.parse(xml_content, disable_entities=False) # NOT OK for billion laughs/quadratic
0 commit comments