qbit/go
1
0
Fork 0
mirror of https://github.com/golang/go synced 2024-11-24 13:10:11 -07:00
Code Releases Activity

encoding/xml: reject processing instructions with reserved names

Browse Source 
This is required by the spec.

Fixes: #68499
This commit is contained in:
Demi Marie Obenour 2024-07-14 17:56:38 -04:00
parent 239666cd73
commit 1adf826302
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/encoding/xml/xml.go
View File

@ -610,6 +610,11 @@ func (d *Decoder) rawToken() (Token, error) {
}
return nil, d.err
}
if len(target) >= 3 && target[0:3] != xmlPrefix &&
(target[0] | 0x20) == 'x' && (target[1] | 0x20) == 'm' && (target[2] | 0x20) == 'l' {
d.err = d.syntaxError("Processing instruction name is reserved")
return nil, d.err
}
d.space()
d.buf.Reset()
var b0 byte