search

tontof / kriss_feed

A simple and smart (or stupid) feed reader
279 stars 52 forks source link

Security patch required #422

Closed d-faure closed 3 years ago

d-faure commented 3 years ago

According to https://phpsecurity.readthedocs.io/en/latest/Injection-Attacks.html#xml-injection

There's a need of some security patches here: https://github.com/tontof/kriss_feed/blob/d44afdd54baed5af7e690b65295a45579f6b0a48/src/class/Rss.php#L288

and here: https://github.com/tontof/kriss_feed/blob/d44afdd54baed5af7e690b65295a45579f6b0a48/src/class/Opml.php#L24

No?

tontof commented 3 years ago

I guess you're right, I've merged your modif. Thanks!