summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * Add protection against XML and gzip attacks to xmlrpclibChristian Heimes2013-02-153-14/+206
| |
| * tests for iterparseChristian Heimes2013-02-151-11/+26
| |
| * add module for xmlrpc patchChristian Heimes2013-02-151-0/+21
| |
| * Document forbid_externalChristian Heimes2013-02-151-6/+12
| |
| * Fix for iterparse patch for Python 2.7Christian Heimes2013-02-151-2/+5
| |
| * don't load all modules right awayChristian Heimes2013-02-151-8/+8
| |
| * hack to get bound methods of patched iterparse rightChristian Heimes2013-02-151-11/+21
| |
| * xmlrpclib's ExpatParser needs protection, tooChristian Heimes2013-02-153-26/+78
| |
| * more thanks and explain othersChristian Heimes2013-02-151-1/+13
| |
| * add forbid_external to all classs and functionsChristian Heimes2013-02-157-34/+64
| |
| * remove libxml2 Python lib from tableChristian Heimes2013-02-141-13/+13
| |
| * include README.html and void.cssChristian Heimes2013-02-141-1/+2
| |
| * add style sheet for README.htmlChristian Heimes2013-02-142-1/+440
| |
| * document defusedxml modulesChristian Heimes2013-02-141-0/+28
| |
| * start to document packageChristian Heimes2013-02-141-14/+63
| |
| * test for cyclic entitiesChristian Heimes2013-02-142-0/+27
| |
| * added CVEChristian Heimes2013-02-141-0/+14
| |
| * more thanks and xincludeChristian Heimes2013-02-141-6/+23
| |
| * xincludeChristian Heimes2013-02-141-2/+16
| |
| * Add Genshi testsChristian Heimes2013-02-144-13/+27
| |
| * more testing and docs for ruby and phpChristian Heimes2013-02-135-4/+37
| |
| * more on general XML attacksChristian Heimes2013-02-131-5/+13
| |
| * Python 3.1 compatibilityChristian Heimes2013-02-131-3/+74
| | | | | | | | test xpath injection
| * Skip unavailable Python versionsChristian Heimes2013-02-131-2/+7
| |
| * Python 3.1 compatibilityChristian Heimes2013-02-133-26/+32
| |
| * moved some sections aroundChristian Heimes2013-02-131-38/+82
| | | | | | | | | | document decompression bombs add some infos about Java and .NET
| * Grammar touch-upsBrett Cannon2013-02-121-33/+34
| |
| * add examples for other languagesChristian Heimes2013-02-125-0/+66
| |
| * use a working XML docChristian Heimes2013-02-121-1/+1
| |
| * quote url://Christian Heimes2013-02-121-7/+7
| |
| * document even more casesChristian Heimes2013-02-121-12/+84
| |
| * reformat thanksChristian Heimes2013-02-121-3/+4
| |
| * fixed externel file ref test on Python 3.xChristian Heimes2013-02-121-1/+5
| |
| * implement iterparser patch for Python 2.6Christian Heimes2013-02-122-5/+25
| |
| * thank you to my employerChristian Heimes2013-02-121-1/+5
| |
| * document billion laughs and attribute blowupChristian Heimes2013-02-121-18/+48
| |
| * prefix all callback methods with 'defused_' so it is actually possible to ↵Christian Heimes2013-02-126-42/+89
| | | | | | | | | | | | call the original methods import tostring from all etree modules
| * add test for external entity with reference to a local file:// url.Christian Heimes2013-02-122-35/+57
| | | | | | | | parse and parseString methods of test classes now return something useful
| * corrected list for external entity expansionChristian Heimes2013-02-111-1/+1
| |
| * absolute imports and print functions for everybodyChristian Heimes2013-02-099-12/+19
| | | | | | | | more module doc strings
| * Renamed defusedxml.lxml.check_dtd() to check_docinfo()Christian Heimes2013-02-092-6/+18
| | | | | | | | fixed entity exception for lxml 3+
| * update changelogChristian Heimes2013-02-091-0/+4
| |
| * more testsChristian Heimes2013-02-091-3/+32
| |
| * rename ExternalEntitiesForbidden to ExternalReferenceForbidden (it's raised ↵Christian Heimes2013-02-095-31/+71
| | | | | | | | | | | | | | when an external reference is about to be resolved) unify the argument names in callback functions use proper arguments and formatting in exception classes
| * post release changesChristian Heimes2013-02-082-1/+7
| |
| * Added tag v0.1 for changeset 9ae768d4ccacChristian Heimes2013-02-080-0/+0
| |
| * prepare first releasev0.1Christian Heimes2013-02-082-1/+5
| |
| * whitespace cleanupChristian Heimes2013-02-083-1/+6
| |
| * lxml needs binary content on Python 3.xChristian Heimes2013-02-081-0/+1
| |
| * added more test cases for lxmlChristian Heimes2013-02-082-0/+45
| |