Do not allow xsltproc to access network or files

dmacvicar · Oct 31, 2018 · 7551401 · 7551401
1 parent 22b6ac6
commit 7551401
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/libvirt/utils_xslt.go b/libvirt/utils_xslt.go
@@ -76,7 +76,12 @@ func transformXML(xml string, xslt string) (string, error) {
 		log.Fatal(err)
 	}
 
-	cmd := exec.Command("xsltproc", xsltFile.Name(), xmlFile.Name())
+	cmd := exec.Command("xsltproc",
+		"--nomkdir",
+		"--nonet",
+		"--nowrite",
+		xsltFile.Name(),
+		xmlFile.Name())
 	transformedXML, err := cmd.Output()
 	if err != nil {
 		return xml, err