securing xml2csv eclipse-sumo#11054

rxd199682 · Sep 28, 2022 · 00db199 · 00db199
1 parent 2cda6fb
commit 00db199
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tools/xml/xml2csv.py b/tools/xml/xml2csv.py
@@ -268,7 +268,7 @@ def main(args=None):
     handler = CSVWriter(attrFinder, options)
     if options.validation:
         schema = lxml.etree.XMLSchema(file=options.xsd)
-        parser = lxml.etree.XMLParser(schema=schema)
+        parser = lxml.etree.XMLParser(schema=schema, resolve_entities=False, no_network=True)
         tree = lxml.etree.parse(options.source, parser)
         lxml.sax.saxify(tree, handler)
     else: