Skip to content

Commit 00c4683

Browse files
Update rule metadata (#1079)
1 parent dd5ff1a commit 00c4683

File tree

2 files changed

+1
-14
lines changed

2 files changed

+1
-14
lines changed

python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2755.html

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -3,19 +3,6 @@
33
<p>When parsing the XML file, the content of the external entities is retrieved from an external storage such as the file system or network, which may
44
lead, if no restrictions are put in place, to arbitrary file disclosures or <a
55
href="https://www.owasp.org/index.php/Server_Side_Request_Forgery">server-side request forgery (SSRF)</a> vulnerabilities.</p>
6-
<pre>
7-
&lt;?xml version="1.0" encoding="utf-8"?&gt;
8-
&lt;!DOCTYPE person [
9-
&lt;!ENTITY file SYSTEM "file:///etc/passwd"&gt;
10-
&lt;!ENTITY ssrf SYSTEM "https://internal.network/sensitive_information"&gt;
11-
]&gt;
12-
13-
&lt;person&gt;
14-
&lt;name&gt;&amp;file;&lt;/name&gt;
15-
&lt;city&gt;&amp;ssrf;&lt;/city&gt;
16-
&lt;age&gt;18&lt;/age&gt;
17-
&lt;/person&gt;
18-
</pre>
196
<p>It’s recommended to limit resolution of external entities by using one of these solutions:</p>
207
<ul>
218
<li> If DOCTYPE is not necessary, completely disable all DOCTYPE declarations. </li>

sonarpedia.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"languages": [
44
"PY"
55
],
6-
"latest-update": "2022-01-10T15:34:41.492970Z",
6+
"latest-update": "2022-02-07T13:04:10.465499Z",
77
"options": {
88
"no-language-in-filenames": true,
99
"preserve-filenames": true

0 commit comments

Comments
 (0)