From: Paul Duncan <pabs@...>
Date: 2003-09-05T23:24:42+09:00
Subject: Re: [BUG] REXML 2.7.1 External Entity Parsing


--/9R6240woFu/reHS
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Sean Russell (ser@germane-software.com) wrote:
> On Friday 05 September 2003 07:40, Paul Duncan wrote:
> > There appears to be a bug in REXML 2.7.1 external entity parsing.  The
> > following code throws an error in Ruby 1.8.0/REXML 2.7.1, but not in
> > Ruby 1.6.8/REXML 2.3.5:
>=20
> Thanks.  I'm on it.

Cool.  I appreciate the quick response :).

Like I said, I'm just stripping external entities in Raggle as an
interim solution.

If anyone else is parsing RSS in REXML 2.7.1, they should consider
doing the same.  Here's the code I'm using:

  if $config['strip_external_entities'] && content =3D~ /<!ENTITY %.*?>/m
    content.gsub!(/<!ENTITY %.*?>/m, '')
  end

(it's not perfect, but it's good enough for now).

> BTW, I'll be in the UK from the 12th-27th, and won't have internet
> access.  Any bugs reported during that time will be dealt with upon my
> return.
>=20
> --- SER

--=20
Paul Duncan <pabs@pablotron.org>        pabs in #gah (OPN IRC)
http://www.pablotron.org/               OpenPGP Key ID: 0x82C29562

--/9R6240woFu/reHS
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/WJykzdlT34LClWIRAu07AJ9ji2rYi1l5WEFpnaMWMa/F9fz4iQCfZ+n9
yITbNy+c0LaQbw/xg9Lb0u0=
=3uYb
-----END PGP SIGNATURE-----

--/9R6240woFu/reHS--