mdesalvo/RDFSharp

XML-based parsers potentially vulnerable to XXE attacks

mdesalvo opened this issue · 0 comments

mdesalvo commented

Altough we can rely on XXE-safety of XmlTextReader in .net standard 2.0, it is a good idea to force XmlResolver = null when dealing with XmlReader/XmlDocument.