mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
9 lines
270 B
Ruby
9 lines
270 B
Ruby
# Unsafe: tainted XML reaches REXML::Document.new, the legacy default-vulnerable
|
|
# pure-Ruby XML parser that resolves external entities by default.
|
|
require "rexml/document"
|
|
|
|
def handle(params)
|
|
body = params["xml"]
|
|
doc = REXML::Document.new(body)
|
|
doc.root.text
|
|
end
|