Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
3.3.6 Improvements Removed duplicated entity expansions for performance. GH-194 Patch by Viktor Ivarsson. Improved namespace conflicted attribute check performance. It was too slow for deep elements. Reported by l33thaxor. Fixes Fixed a bug that default entity expansions are counted for security check. Default entity expansions should not be counted because they don't have a security risk. GH-198 GH-199 Patch Viktor Ivarsson Fixed a parser bug that parameter entity references in internal subsets are expanded. It's not allowed in the XML specification. GH-191 Patch by NAITOH Jun. Fixed a stream parser bug that user-defined entity references in text aren't expanded. GH-200 Patch by NAITOH Jun. REXML 3.3.5 - 2024-08-12 Fixes Fixed a bug that REXML::Security.entity_expansion_text_limit check has wrong text size calculation in SAX and pull parsers. GH-193 GH-195 Reported by Viktor Ivarsson. Patch by NAITOH Jun. REXML 3.3.4 - 2024-08-01 Fixes Fixed a bug that REXML::Security isn't defined when REXML::Parsers::StreamParser is used and rexml/parsers/streamparser is only required. GH-189 Patch by takuya kodama. REXML 3.3.3 - 2024-08-01 Improvements Added support for detecting invalid XML that has unsupported content before root element GH-184 Patch by NAITOH Jun. Added support for REXML::Security.entity_expansion_limit= and REXML::Security.entity_expansion_text_limit= in SAX2 and pull parsers GH-187 Patch by NAITOH Jun. Added more tests for invalid XMLs. GH-183 Patch by Watson. Added more performance tests. Patch by Watson. Improved parse performance. GH-186 Patch by tomoya ishida.
- Loading branch information