mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-09-26 18:29:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

Fix typos and clear up one very odd bit of wording as pointed out by

Browse source 
Ezio.
This commit is contained in:
Gregory P. Smith 2013-03-30 01:38:38 -07:00
parent e66e7de5d6
commit da76aa8e47
1 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

12
Doc/library/xml.rst
View file

@ -108,20 +108,22 @@ all known attack vectors with examples and references.
defused packages
----------------
These external packages are recommended for any code that parses
untrusted XML data.
`defusedxml`_ is a pure Python package with modified subclasses of all stdlib
XML parsers that prevent any potentially malicious operation. The courses of
action are recommended for any server code that parses untrusted XML data. The
package also ships with example exploits and an extended documentation on more
XML parsers that prevent any potentially malicious operation. The
package also ships with example exploits and extended documentation on more
XML exploits like xpath injection.
`defusedexpat`_ provides a modified libexpat and patched replacment
`defusedexpat`_ provides a modified libexpat and patched replacement
:mod:`pyexpat` extension module with countermeasures against entity expansion
DoS attacks. Defusedexpat still allows a sane and configurable amount of entity
expansions. The modifications will be merged into future releases of Python.
The workarounds and modifications are not included in patch releases as they
break backward compatibility. After all inline DTD and entity expansion are
well-definied XML features.
well-defined XML features.
.. _defusedxml: https://pypi.python.org/pypi/defusedxml/