ckruse / CFPropertyList

Read, write and manipulate both binary and XML property lists as defined by apple
MIT License
212 stars 47 forks source link

remove NOENT option for security #56

Closed shubhampathak closed 4 years ago

shubhampathak commented 4 years ago

NOENT, which is used to substitute entities also enables processing of both regular and external entities. Which seems risky when you don't trust the XML source. NONET will have no effect if used with NOENT.

ckruse commented 4 years ago

💙💚💛💜❤️