Browse Source

Fix Python version since which external enities are not resolved by default. (GH-11237)

pull/11992/head
Serhiy Storchaka 7 years ago
committed by GitHub
parent
commit
bf99bcf56c
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
  1. 2
      Doc/library/xml.dom.pulldom.rst
  2. 2
      Doc/library/xml.rst
  3. 2
      Doc/library/xml.sax.rst

2
Doc/library/xml.dom.pulldom.rst

@ -25,7 +25,7 @@ events until either processing is finished or an error condition occurs.
maliciously constructed data. If you need to parse untrusted or
unauthenticated data see :ref:`xml-vulnerabilities`.
.. versionchanged:: 3.8
.. versionchanged:: 3.7.1
The SAX parser no longer processes general external entities by default to
increase security by default. To enable processing of external entities,

2
Doc/library/xml.rst

@ -75,7 +75,7 @@ decompression bomb Safe Safe Safe S
2. :mod:`xml.dom.minidom` doesn't expand external entities and simply returns
the unexpanded entity verbatim.
3. :mod:`xmlrpclib` doesn't expand external entities and omits them.
4. Since Python 3.8, external general entities are no longer processed by
4. Since Python 3.7.1, external general entities are no longer processed by
default.

2
Doc/library/xml.sax.rst

@ -24,7 +24,7 @@ the SAX API.
constructed data. If you need to parse untrusted or unauthenticated data see
:ref:`xml-vulnerabilities`.
.. versionchanged:: 3.8
.. versionchanged:: 3.7.1
The SAX parser no longer processes general external entities by default
to increase security. Before, the parser created network connections

Loading…
Cancel
Save