SIRI-1037 Fix potential XXE vulnerability#543

Merged

ymo-sci merged 3 commits intodevelopfrom feature/ymo/SIRI-1037-xxe

Dec 11, 2024

+39-7

Commits on Dec 10, 2024

fix potential XXE vulnerability
ymo-sci
committed
drive-by: fix some typos
ymo-sci
committed
add test and additional disallow-doctype-decl to disallow it on parsing via disallow declaration of doctypes and also disallowinf xincludes as recommended in https://cheatsheetseries.owasp.org/chea…
ymo-sci
committed