boostsecurityio/lotp

[LOTP] Add xsltproc

Open

#36 创建于 2024年8月6日

在 GitHub 查看
 (0 评论) (0 反应) (0 负责人)HTML (14 fork)auto 404
good first issueidea

仓库指标

Star
 (158 star)
PR 合并指标
 (PR 指标待抓取)

描述

Description of the LOTP tool

xsltproc makes old-school XXE hard / if not impossible? because of URI constraints, but supported exsl:document extension (exslt.github.io/exsl/elements/document/index.html) provides an arbitrary write primitive (ex. Koha-Community/Koha@main/t/db_dependent/Koha/XSLT/Security.t#L64-L75)

贡献者指南