lsm/DotNetCore.SKIT.FlurlHttpClient.Wechat
1
0
Fork 0
mirror of https://gitee.com/fudiwei/DotNetCore.SKIT.FlurlHttpClient.Wechat.git synced 2025-12-29 09:54:44 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: 修复潜在的 XXE 漏洞风险

Browse Source
This commit is contained in:
Fu Diwei
2021-08-17 16:26:37 +08:00
parent 0e2142cd2d
commit b9f8167fee
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/SKIT.FlurlHttpClient.Wechat.Api/Utilities/WxBizMsgCryptor.cs
View File

@@ -270,6 +270,7 @@ namespace SKIT.FlurlHttpClient.Wechat.Api.Utilities
try try
{ {
XmlDocument xmlDoc = new XmlDocument(); XmlDocument xmlDoc = new XmlDocument();
xmlDoc.XmlResolver = null;
xmlDoc.LoadXml(xml); xmlDoc.LoadXml(xml);
XmlNode? xmlRoot = xmlDoc.FirstChild; XmlNode? xmlRoot = xmlDoc.FirstChild;

1
src/SKIT.FlurlHttpClient.Wechat.Work/Utilities/WxBizMsgCryptor.cs
View File

@@ -273,6 +273,7 @@ namespace SKIT.FlurlHttpClient.Wechat.Work.Utilities
try try
{ {
XmlDocument xmlDoc = new XmlDocument(); XmlDocument xmlDoc = new XmlDocument();
xmlDoc.XmlResolver = null;
xmlDoc.LoadXml(xml); xmlDoc.LoadXml(xml);
XmlNode? xmlRoot = xmlDoc.FirstChild; XmlNode? xmlRoot = xmlDoc.FirstChild;