python
diff --git a/‎library/xml.po‎
Lines changed: 63 additions & 41 deletions b/‎library/xml.po‎
Lines changed: 63 additions & 41 deletions
diff --git a/‎sphinx.po‎
Lines changed: 3 additions & 3 deletions b/‎sphinx.po‎
Lines changed: 3 additions & 3 deletions
@@ -1,15 +1,19 @@
 # SOME DESCRIPTIVE TITLE.
-# Copyright (C) 2001-2018, Python Software Foundation
+# Copyright (C) 2001-2019, Python Software Foundation
 # This file is distributed under the same license as the Python package.
 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
 # 
+# Translators:
+# 汇民 王 <[email protected]>, 2019
+# 
 #, fuzzy
 msgid ""
 msgstr ""
 "Project-Id-Version: Python 3.7\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-12-22 10:07+0900\n"
+"POT-Creation-Date: 2019-01-01 10:14+0900\n"
 "PO-Revision-Date: 2017-02-16 23:36+0000\n"
+"Last-Translator: 汇民 王 <[email protected]>, 2019\n"
 "Language-Team: Chinese (China) (https://www.transifex.com/python-doc/teams/5390/zh_CN/)\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -19,23 +23,25 @@ msgstr ""
 
 #: ../../library/xml.rst:4
 msgid "XML Processing Modules"
-msgstr ""
+msgstr "XML处理模块"
 
 #: ../../library/xml.rst:12
 msgid "**Source code:** :source:`Lib/xml/`"
-msgstr ""
+msgstr "**源码：** :source:`Lib/xml/`"
 
 #: ../../library/xml.rst:16
 msgid ""
 "Python's interfaces for processing XML are grouped in the ``xml`` package."
-msgstr ""
+msgstr "用于处理XML的Python接口分组在 ``xml`` 包中。"
 
 #: ../../library/xml.rst:20
 msgid ""
 "The XML modules are not secure against erroneous or maliciously constructed "
 "data.  If you need to parse untrusted or unauthenticated data see the :ref"
 ":`xml-vulnerabilities` and :ref:`defused-packages` sections."
 msgstr ""
+"XML 模块对于错误或恶意构造的数据是不安全的。 如果需要解析不受信任或未经身份验证的数据，请参阅 :ref:`xml-vulnerabilities`"
+" 和 :ref:`defused-packages` 部分。"
 
 #: ../../library/xml.rst:25
 msgid ""
@@ -44,46 +50,48 @@ msgid ""
 "is included with Python, so the :mod:`xml.parsers.expat` module will always "
 "be available."
 msgstr ""
+"值得注意的是 :mod:`xml` 包中的模块要求至少有一个 SAX 兼容的 XML 解析器可用。在 Pythonm中包含 Expat 解析器，因此 "
+":mod:`xml.parsers.expat` 模块将始终可用。"
 
 #: ../../library/xml.rst:30
 msgid ""
 "The documentation for the :mod:`xml.dom` and :mod:`xml.sax` packages are the"
 " definition of the Python bindings for the DOM and SAX interfaces."
-msgstr ""
+msgstr ":mod:`xml.dom` 和 :mod:`xml.sax` 包的文档是 DOM 和 SAX 接口的 Python 绑定的定义。"
 
 #: ../../library/xml.rst:33
 msgid "The XML handling submodules are:"
-msgstr ""
+msgstr "XML 处理子模块包括:"
 
 #: ../../library/xml.rst:35
 msgid ""
 ":mod:`xml.etree.ElementTree`: the ElementTree API, a simple and lightweight "
 "XML processor"
-msgstr ""
+msgstr ":mod:`xml.etree.ElementTree`： ElementTree API，一个简单而轻量级的XML处理器"
 
 #: ../../library/xml.rst:40
 msgid ":mod:`xml.dom`: the DOM API definition"
-msgstr ""
+msgstr ":mod:`xml.dom`：DOM API 定义"
 
 #: ../../library/xml.rst:41
 msgid ":mod:`xml.dom.minidom`: a minimal DOM implementation"
-msgstr ""
+msgstr ":mod:`xml.dom.minidom`：最小的 DOM 实现"
 
 #: ../../library/xml.rst:42
 msgid ":mod:`xml.dom.pulldom`: support for building partial DOM trees"
-msgstr ""
+msgstr ":mod:`xml.dom.pulldom`：支持构建部分 DOM 树"
 
 #: ../../library/xml.rst:46
 msgid ":mod:`xml.sax`: SAX2 base classes and convenience functions"
-msgstr ""
+msgstr ":mod:`xml.sax`：SAX2 基类和便利函数"
 
 #: ../../library/xml.rst:47
 msgid ":mod:`xml.parsers.expat`: the Expat parser binding"
-msgstr ""
+msgstr ":mod:`xml.parsers.expat`：Expat解析器绑定"
 
 #: ../../library/xml.rst:53
 msgid "XML vulnerabilities"
-msgstr ""
+msgstr "XML 漏洞"
 
 #: ../../library/xml.rst:55
 msgid ""
@@ -92,112 +100,113 @@ msgid ""
 "attacks, access local files, generate network connections to other machines,"
 " or circumvent firewalls."
 msgstr ""
+"XML 处理模块对于恶意构造的数据是不安全的。 攻击者可能滥用 XML 功能来执行拒绝服务攻击、访问本地文件、生成与其它计算机的网络连接或绕过防火墙。"
 
 #: ../../library/xml.rst:60
 msgid ""
 "The following table gives an overview of the known attacks and whether the "
 "various modules are vulnerable to them."
-msgstr ""
+msgstr "下表概述了已知的攻击以及各种模块是否容易受到攻击。"
 
 #: ../../library/xml.rst:64
 msgid "kind"
-msgstr ""
+msgstr "种类"
 
 #: ../../library/xml.rst:64
 msgid "sax"
-msgstr ""
+msgstr "sax"
 
 #: ../../library/xml.rst:64
 msgid "etree"
-msgstr ""
+msgstr "etree"
 
 #: ../../library/xml.rst:64
 msgid "minidom"
-msgstr ""
+msgstr "minidom"
 
 #: ../../library/xml.rst:64
 msgid "pulldom"
-msgstr ""
+msgstr "pulldom"
 
 #: ../../library/xml.rst:64
 msgid "xmlrpc"
-msgstr ""
+msgstr "xmlrpc"
 
 #: ../../library/xml.rst:66
 msgid "billion laughs"
-msgstr ""
+msgstr "billion laughs"
 
 #: ../../library/xml.rst:66 ../../library/xml.rst:66 ../../library/xml.rst:66
 #: ../../library/xml.rst:66 ../../library/xml.rst:66 ../../library/xml.rst:67
 #: ../../library/xml.rst:67 ../../library/xml.rst:67 ../../library/xml.rst:67
 #: ../../library/xml.rst:67 ../../library/xml.rst:70
 msgid "**Vulnerable**"
-msgstr ""
+msgstr "**易受攻击**"
 
 #: ../../library/xml.rst:67
 msgid "quadratic blowup"
-msgstr ""
+msgstr "quadratic blowup"
 
 #: ../../library/xml.rst:68 ../../library/xml.rst:99
 msgid "external entity expansion"
-msgstr ""
+msgstr "external entity expansion"
 
 #: ../../library/xml.rst:68 ../../library/xml.rst:68 ../../library/xml.rst:69
 #: ../../library/xml.rst:69
 msgid "Safe (4)"
-msgstr ""
+msgstr "安全 (4)"
 
 #: ../../library/xml.rst:68
 msgid "Safe    (1)"
-msgstr ""
+msgstr "安全 (1)"
 
 #: ../../library/xml.rst:68
 msgid "Safe    (2)"
-msgstr ""
+msgstr "安全 (2)"
 
 #: ../../library/xml.rst:68
 msgid "Safe    (3)"
-msgstr ""
+msgstr "安全 (3)"
 
 #: ../../library/xml.rst:69 ../../library/xml.rst:104
 msgid "`DTD`_ retrieval"
-msgstr ""
+msgstr "`DTD`_ retrieval"
 
 #: ../../library/xml.rst:69 ../../library/xml.rst:69 ../../library/xml.rst:69
 #: ../../library/xml.rst:70 ../../library/xml.rst:70 ../../library/xml.rst:70
 #: ../../library/xml.rst:70
 msgid "Safe"
-msgstr ""
+msgstr "安全"
 
 #: ../../library/xml.rst:70 ../../library/xml.rst:111
 msgid "decompression bomb"
-msgstr ""
+msgstr "decompression bomb"
 
 #: ../../library/xml.rst:73
 msgid ""
 ":mod:`xml.etree.ElementTree` doesn't expand external entities and raises a "
 ":exc:`ParserError` when an entity occurs."
-msgstr ""
+msgstr ":mod:`xml.etree.ElementTree` 不会扩展外部实体并在实体发生时引发 :exc:`ParserError`。"
 
 #: ../../library/xml.rst:75
 msgid ""
 ":mod:`xml.dom.minidom` doesn't expand external entities and simply returns "
 "the unexpanded entity verbatim."
-msgstr ""
+msgstr ":mod:`xml.dom.minidom` 不会扩展外部实体，只是简单地返回未扩展的实体。"
 
 #: ../../library/xml.rst:77
 msgid ":mod:`xmlrpclib` doesn't expand external entities and omits them."
-msgstr ""
+msgstr ":mod:`xmlrpclib` 不扩展外部实体并省略它们。"
 
 #: ../../library/xml.rst:78
 msgid ""
 "Since Python 3.7.1, external general entities are no longer processed by "
 "default."
-msgstr ""
+msgstr "从 Python 3.7.1 开始，默认情况下不再处理外部通用实体。"
 
 #: ../../library/xml.rst:87
 msgid "billion laughs / exponential entity expansion"
-msgstr ""
+msgstr "billion laughs / exponential entity expansion （狂笑/递归实体扩展）"
 
 #: ../../library/xml.rst:83
 msgid ""
@@ -207,10 +216,12 @@ msgid ""
 "string. The exponential expansion results in several gigabytes of text and "
 "consumes lots of memory and CPU time."
 msgstr ""
+"`Billion Laughs`_ 攻击 -- 也称为递归实体扩展 -- 使用多级嵌套实体。 每个实体多次引用另一个实体，最终实体定义包含一个小字符串。"
+" 指数级扩展导致几千 GB 的文本，并消耗大量内存和 CPU 时间。"
 
 #: ../../library/xml.rst:94
 msgid "quadratic blowup entity expansion"
-msgstr ""
+msgstr "quadratic blowup entity expansion（二次爆炸实体扩展）"
 
 #: ../../library/xml.rst:90
 msgid ""
@@ -220,20 +231,24 @@ msgid ""
 " isn't as efficient as the exponential case but it avoids triggering parser "
 "countermeasures that forbid deeply-nested entities."
 msgstr ""
+"二次爆炸攻击类似于 `Billion Laughs`_ 攻击，它也滥用实体扩展。 "
+"它不是嵌套实体，而是一遍又一遍地重复一个具有几千个字符的大型实体。攻击不如递归情况有效，但它避免触发禁止深度嵌套实体的解析器对策。"
 
 #: ../../library/xml.rst:97
 msgid ""
 "Entity declarations can contain more than just text for replacement. They "
 "can also point to external resources or local files. The XML parser accesses"
 " the resource and embeds the content into the XML document."
-msgstr ""
+msgstr "实体声明可以包含的不仅仅是替换文本。 它们还可以指向外部资源或本地文件。 XML 解析器访问资源并将内容嵌入到 XML 文档中。"
 
 #: ../../library/xml.rst:102
 msgid ""
 "Some XML libraries like Python's :mod:`xml.dom.pulldom` retrieve document "
 "type definitions from remote or local locations. The feature has similar "
 "implications as the external entity expansion issue."
 msgstr ""
+"Python 的一些 XML 库 :mod:`xml.dom.pulldom` 从远程或本地位置检索文档类型定义。 "
+"该功能与外部实体扩展问题具有相似的含义。"
 
 #: ../../library/xml.rst:107
 msgid ""
@@ -242,16 +257,18 @@ msgid ""
 " files. For an attacker it can reduce the amount of transmitted data by "
 "three magnitudes or more."
 msgstr ""
+"Decompression bombs（解压炸弹，又名 `ZIP bomb`_）适用于所有可以解析压缩 XML 流（例如 gzip 压缩的 HTTP "
+"流或 LZMA 压缩的文件）的 XML 库。 对于攻击者来说，它可以将传输的数据量减少三个量级或更多。"
 
 #: ../../library/xml.rst:113
 msgid ""
 "The documentation for `defusedxml`_ on PyPI has further information about "
 "all known attack vectors with examples and references."
-msgstr ""
+msgstr "PyPI上 `defusedxml`_ 的文档包含有关所有已知攻击向量的更多信息以及示例和参考。"
 
 #: ../../library/xml.rst:119
 msgid "The :mod:`defusedxml` and :mod:`defusedexpat` Packages"
-msgstr ""
+msgstr ":mod:`defusedxml` 和 :mod:`defusedexpat` 软件包"
 
 #: ../../library/xml.rst:121
 msgid ""
@@ -261,6 +278,8 @@ msgid ""
 "data. The package also ships with example exploits and extended "
 "documentation on more XML exploits such as XPath injection."
 msgstr ""
+"`defusedxml`_ 是一个纯 Python 软件包，它修改了所有标准库 XML 解析器的子类，可以防止任何潜在的恶意操作。 "
+"对于解析不受信任的XML数据的任何服务器代码，建议使用此程序包。 该软件包还提供了有关更多 XML 漏洞（如 XPath 注入）的示例漏洞和扩展文档。"
 
 #: ../../library/xml.rst:127
 msgid ""
@@ -271,3 +290,6 @@ msgid ""
 "of Python, but will not be included in any bugfix releases of Python because"
 " they break backward compatibility."
 msgstr ""
+"`defusedexpat`_ 提供了一个修改过的 libexpat 和一个打过补丁的 :mod:`pyexpat` "
+"模块，它有针对实体扩展DoS攻击的对策。 :mod:`defusedexpat` 模块仍然允许合理且可配置的实体扩展量。 这些修改可能包含在 "
+"Python 的某些未来版本中，但不会包含在 Python 的任何修复版本中，因为它们会破坏向后兼容性。"
@@ -5,8 +5,8 @@
 # 
 # Translators:
 # ryohei <[email protected]>, 2017
-# Shengjing Zhu <[email protected]>, 2017
-# cdarlint <[email protected]>, 2018
+# Shengjing Zhu <[email protected]>, 2018
+# cdarlint <[email protected]>, 2019
 # Freesand Leo <[email protected]>, 2019
 # 
 #, fuzzy
@@ -159,7 +159,7 @@ msgstr "总目录"
 
 #: ../../tools/templates/indexcontent.html:45
 msgid "all functions, classes, terms"
-msgstr "所有的函数、类、术语"
+msgstr "全部函数、类、术语"
 
 #: ../../tools/templates/indexcontent.html:46
 msgid "Glossary"