[issue42051] plistlib inherits XML vulnerabilities: we should document them

[Serhiy Storchaka]

Serhiy Storchaka <storchaka+cpyt...@gmail.com> added the comment:

Seems that we can not control entity definitions and expansions. We only can 
limit the number of expanded entities per element (the size of self.data).

What is the reasonable default limit (taking into account that every &lt; and 
&#12345; is a separate entity)? How to name the limit parameter if we make it 
configurable? What type of exceptions should be raised?

----------
nosy: +christian.heimes

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue42051>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com