remove NOENT option for security

ckruse / CFPropertyList

Read, write and manipulate both binary and XML property lists as defined by apple

MIT License

212 stars 47 forks source link

remove NOENT option for security #56

Closed shubhampathak closed 4 years ago

shubhampathak commented 4 years ago

NOENT, which is used to substitute entities also enables processing of both regular and external entities. Which seems risky when you don't trust the XML source. NONET will have no effect if used with NOENT.

Github Issue: https://github.com/ckruse/CFPropertyList/issues/55

ckruse commented 4 years ago

💙💚💛💜❤️