mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
11 lines
352 B
Ruby
11 lines
352 B
Ruby
# Phase 05 (Track J.3) — Ruby XXE benign fixture.
|
|
#
|
|
# Same parser surface as `vuln.rb` but the document is built under
|
|
# `REXML::Document::entity_expansion_limit = 0`, so the same payload's
|
|
# `<!ENTITY>` block triggers no expansion.
|
|
require 'rexml/document'
|
|
|
|
def run(body)
|
|
REXML::Document.entity_expansion_limit = 0
|
|
REXML::Document.new(body)
|
|
end
|