[issue17239] XML vulnerabilities in Python

2013-03-25 Thread Raynard Sandwick
Changes by Raynard Sandwick : -- nosy: +rsandwick3 ___ Python tracker <http://bugs.python.org/issue17239> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue2124] xml.sax and xml.dom fetch DTDs by default

2013-02-27 Thread Raynard Sandwick
Raynard Sandwick added the comment: I have opened issue #17318 to try to specify the problem better. While I do think that catalogs are the correct fix for the validation use case (and thus would like to see something more out-of-the-box in that vein), the real trouble is that users are often

[issue17318] xml.sax and xml.dom fetch DTDs by default

2013-02-27 Thread Raynard Sandwick
New submission from Raynard Sandwick: Note that URIs in the following are only meant as links when in parentheses; otherwise, they are identifiers and mostly will not yield useful results. I have only worked with xml.sax in Python 2.6 and 2.7, so I cannot speak to its current state in later