fix potential xxe attacks when parsing xml files

2017-08-14 09:52:51 +02:00
parent c19326dc3c
commit 35f2e95de2
5 changed files with 19 additions and 7 deletions
--- a/src/KeePassLib2Android/Keys/KcpKeyFile.cs
+++ b/src/KeePassLib2Android/Keys/KcpKeyFile.cs
@@ -254,7 +254,7 @@ namespace KeePassLib.Keys

 			try
 			{
-				XmlDocument doc = new XmlDocument();
+				XmlDocument doc = new XmlDocument() { XmlResolver = null };
 				doc.Load(ms);

 				XmlElement el = doc.DocumentElement;