Closed dwarring closed 3 years ago
If I change <doc>This is a valid document &foo; !</doc>
to <doc>This is a valid document !</doc>
, it no longer seg-faults.
It's the entity reference, which gets included in the returned document fragment, but has, a now invalid, reference back to the DtD.
Fixed by avoiding following entity references in GC, Dereferencing Entity References is still dangerous, if the DtD has been removed.
Entity reference content is now removed when the Dtd is removed.
This is segfaulting: