Waiting for validation
Identifiez la faille de sécurité majeure présente dans ce code de traitement XML.
from lxml import etree
def parse_config(xml_data):
# Analyse d'un fichier XML de configuration
parser = etree.XMLParser(resolve_entities=True)
tree = etree.fromstring(xml_data, parser=parser)
return tree.find('setting').text
Author: WeLoveDevsStatus: Waiting for validationQuestion not yet passed
0
Community EvaluationsNo one has reviewed this question yet, be the first!