Yeah agreed, since it's non-default config this is OSSN territory. Also since the issue was discussed on IRC I think we can make it public (which expands the pool of people that can work on the note).
DefusedXML has never been added to G-R, so there is no safe way to parse untrusted XML. I don't remember what the blocker was... I'll post something on ML about it.
Yeah agreed, since it's non-default config this is OSSN territory. Also since the issue was discussed on IRC I think we can make it public (which expands the pool of people that can work on the note).
DefusedXML has never been added to G-R, so there is no safe way to parse untrusted XML. I don't remember what the blocker was... I'll post something on ML about it.