CVSROOT: /cvs Module name: src Changes by: clau...@cvs.openbsd.org 2021/11/09 04:01:04
Modified files:
usr.sbin/rpki-client: rrdp_delta.c rrdp_notification.c
rrdp_snapshot.c
Log message:
Issue a parse error for XML files that include a DOCTYPE section.
DTD handling is known for various security problems and so it is best to
not even enter that mine field.
Also the RFC defines the RRDP XML schema using RELAX NG instead of DTD.
With and OK benno@ job@ tb@ beck@ deraadt@
