Skip to content

Use defusedxml for Parsing XML #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
pixeebot-test wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Use defusedxml for Parsing XML #12

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions introduction/views.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,8 @@

from .models import FAANG,info,login,comments,otp
from random import randint
from xml.dom.pulldom import parseString, START_ELEMENT
from xml.dom.pulldom import START_ELEMENT
from xml.sax.handler import feature_external_ges
from xml.sax import make_parser
from django.views.decorators.csrf import csrf_exempt
from django.template import loader
from django.template.loader import render_to_string
Expand All @@ -39,6 +38,9 @@
import logging
import requests
import re
import defusedxml.pulldom
import defusedxml.sax

#*****************************************Login and Registration****************************************************#

def register(request):
Expand Down Expand Up @@ -247,9 +249,9 @@ def xxe_see(request):
@csrf_exempt
def xxe_parse(request):

parser = make_parser()
parser = defusedxml.sax.make_parser()
parser.setFeature(feature_external_ges, True)
doc = parseString(request.body.decode('utf-8'), parser=parser)
doc = defusedxml.pulldom.parseString(request.body.decode('utf-8'), parser=parser)
for event, node in doc:
if event == START_ELEMENT and node.tagName == 'text':
doc.expandNode(node)
Expand Down