fix: DTD processing

SenexCrenshaw · Feb 8, 2024 · 643b704 · 643b704
1 parent bec0b91
commit 643b704
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -366,4 +366,3 @@ epg.xml
 m3u.m3u
 ghtoken
 Dockerfile
-Dockerfile
diff --git a/StreamMaster.Domain/Common/FileUtil.cs b/StreamMaster.Domain/Common/FileUtil.cs
@@ -6,6 +6,7 @@
 using System.Net;
 using System.Text;
 using System.Text.Json;
+using System.Xml;
 using System.Xml.Serialization;
 
 namespace StreamMaster.Domain.Common;
@@ -43,9 +44,16 @@ public static string CleanUpFileName(string fullName)
 
         try
         {
+            XmlReaderSettings settings = new()
+            {
+                DtdProcessing = DtdProcessing.Parse,
+                ValidationType = ValidationType.DTD,
+                MaxCharactersFromEntities = 1024
+            };
 
             XmlSerializer serializer = new(typeof(XMLTV));
-            using Stream reader = GetFileDataStream(filepath);
+            using Stream fileStream = GetFileDataStream(filepath);
+            using XmlReader reader = XmlReader.Create(fileStream, settings);
             object? result = serializer.Deserialize(reader);
             return (XMLTV?)result;
         }