rexml 3.3.3 → 3.3.5
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of rexml might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/NEWS.md +31 -0
- data/lib/rexml/parsers/baseparser.rb +2 -3
- data/lib/rexml/rexml.rb +1 -1
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8e2ee370ff6c1ab70149f6743a12ddf1eeae2c2af3c20f8cb7c6e56ff9699eec
|
|
4
|
+
data.tar.gz: 158254197a12b1038b9b5e116c9abc89a329ef97acda8031399a56d3aee45fe9
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 6b805e28e50ef71bbc5d0349fdd4ec57ec4811bba94fe4c3f8aa17bedb81971da48e98205c53a8eadd18f07b69a2f68c8200529d546aef4187f9f3e903670857
|
|
7
|
+
data.tar.gz: df3e369135f9b156475772a77702a91d45b8ee64ad49f608b2b33dc63d7b07dd271d7ac458d0b5e944e613798a0940231282997a747c4838e3e5c3afaf60253b
|
data/NEWS.md
CHANGED
|
@@ -1,5 +1,36 @@
|
|
|
1
1
|
# News
|
|
2
2
|
|
|
3
|
+
## 3.3.5 - 2024-08-12 {#version-3-3-5}
|
|
4
|
+
|
|
5
|
+
### Fixes
|
|
6
|
+
|
|
7
|
+
* Fixed a bug that `REXML::Security.entity_expansion_text_limit`
|
|
8
|
+
check has wrong text size calculation in SAX and pull parsers.
|
|
9
|
+
* GH-193
|
|
10
|
+
* GH-195
|
|
11
|
+
* Reported by Viktor Ivarsson.
|
|
12
|
+
* Patch by NAITOH Jun.
|
|
13
|
+
|
|
14
|
+
### Thanks
|
|
15
|
+
|
|
16
|
+
* Viktor Ivarsson
|
|
17
|
+
|
|
18
|
+
* NAITOH Jun
|
|
19
|
+
|
|
20
|
+
## 3.3.4 - 2024-08-01 {#version-3-3-4}
|
|
21
|
+
|
|
22
|
+
### Fixes
|
|
23
|
+
|
|
24
|
+
* Fixed a bug that `REXML::Security` isn't defined when
|
|
25
|
+
`REXML::Parsers::StreamParser` is used and
|
|
26
|
+
`rexml/parsers/streamparser` is only required.
|
|
27
|
+
* GH-189
|
|
28
|
+
* Patch by takuya kodama.
|
|
29
|
+
|
|
30
|
+
### Thanks
|
|
31
|
+
|
|
32
|
+
* takuya kodama
|
|
33
|
+
|
|
3
34
|
## 3.3.3 - 2024-08-01 {#version-3-3-3}
|
|
4
35
|
|
|
5
36
|
### Improvements
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
require_relative '../parseexception'
|
|
3
3
|
require_relative '../undefinednamespaceexception'
|
|
4
|
+
require_relative '../security'
|
|
4
5
|
require_relative '../source'
|
|
5
6
|
require 'set'
|
|
6
7
|
require "strscan"
|
|
@@ -547,15 +548,13 @@ module REXML
|
|
|
547
548
|
}
|
|
548
549
|
matches.collect!{|x|x[0]}.compact!
|
|
549
550
|
if matches.size > 0
|
|
550
|
-
sum = 0
|
|
551
551
|
matches.each do |entity_reference|
|
|
552
552
|
unless filter and filter.include?(entity_reference)
|
|
553
553
|
entity_value = entity( entity_reference, entities )
|
|
554
554
|
if entity_value
|
|
555
555
|
re = Private::DEFAULT_ENTITIES_PATTERNS[entity_reference] || /&#{entity_reference};/
|
|
556
556
|
rv.gsub!( re, entity_value )
|
|
557
|
-
|
|
558
|
-
if sum > Security.entity_expansion_text_limit
|
|
557
|
+
if rv.bytesize > Security.entity_expansion_text_limit
|
|
559
558
|
raise "entity expansion has grown too large"
|
|
560
559
|
end
|
|
561
560
|
else
|
data/lib/rexml/rexml.rb
CHANGED
metadata
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: rexml
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 3.3.
|
|
4
|
+
version: 3.3.5
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Kouhei Sutou
|
|
8
8
|
bindir: bin
|
|
9
9
|
cert_chain: []
|
|
10
|
-
date: 2024-08-
|
|
10
|
+
date: 2024-08-12 00:00:00.000000000 Z
|
|
11
11
|
dependencies:
|
|
12
12
|
- !ruby/object:Gem::Dependency
|
|
13
13
|
name: strscan
|
|
@@ -116,7 +116,7 @@ homepage: https://github.com/ruby/rexml
|
|
|
116
116
|
licenses:
|
|
117
117
|
- BSD-2-Clause
|
|
118
118
|
metadata:
|
|
119
|
-
changelog_uri: https://github.com/ruby/rexml/releases/tag/v3.3.
|
|
119
|
+
changelog_uri: https://github.com/ruby/rexml/releases/tag/v3.3.5
|
|
120
120
|
rdoc_options:
|
|
121
121
|
- "--main"
|
|
122
122
|
- README.md
|