JS: Exclude patched libraries from `xml-bomb` sink#20048

Open

Napalys wants to merge 4 commits intogithub:mainfrom

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.

Alternative Proxies:

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

JS: Exclude patched libraries from `xml-bomb` sink#20048

JS: Exclude patched libraries from `xml-bomb` sink#20048
Napalys wants to merge 4 commits intogithub:mainfrom
Napalys:js/xml_bomb_sinks

Commits on Jul 15, 2025

Removed `libxmljs` from being marked as `sink` for `xml-bomb`.

Added change note

Removed `lxml.etree.XMLParser` from xml bomb sinks

Added change note for python

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

JS: Exclude patched libraries from `xml-bomb` sink#20048Napalys wants to merge 4 commits intogithub:maingithub/codeql:mainfrom Napalys:js/xml_bomb_sinksNapalys/codeql:js/xml_bomb_sinksCopy head branch name to clipboard

Commits

Commits on Jul 15, 2025

Removed `libxmljs` from being marked as `sink` for `xml-bomb`.

Added change note

Removed `lxml.etree.XMLParser` from xml bomb sinks

Added change note for python

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

JS: Exclude patched libraries from `xml-bomb` sink#20048
Napalys wants to merge 4 commits intogithub:mainfrom
Napalys:js/xml_bomb_sinks