Restrict XSLT permissions

EnricoMi · Mar 10, 2023 · d083b56 · d083b56
1 parent ad1a82f
commit d083b56
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/python/publish/nunit.py b/python/publish/nunit.py
@@ -6,7 +6,7 @@
 from publish.junit import JUnitTree, ParsedJUnitFile, progress_safe_parse_xml_file, xml_has_root_element
 
 with (pathlib.Path(__file__).resolve().parent / 'xslt' / 'nunit3-to-junit.xslt').open('r', encoding='utf-8') as r:
-    transform_nunit_to_junit = etree.XSLT(etree.parse(r))
+    transform_nunit_to_junit = etree.XSLT(etree.parse(r), regexp=False, access_control=etree.XSLTAccessControl.DENY_ALL)
 
 
 def is_nunit(path: str) -> bool:

diff --git a/python/publish/trx.py b/python/publish/trx.py
@@ -6,7 +6,7 @@
 from publish.junit import JUnitTree, ParsedJUnitFile, progress_safe_parse_xml_file, xml_has_root_element
 
 with (pathlib.Path(__file__).resolve().parent / 'xslt' / 'trx-to-junit.xslt').open('r', encoding='utf-8') as r:
-    transform_trx_to_junit = etree.XSLT(etree.parse(r))
+    transform_trx_to_junit = etree.XSLT(etree.parse(r), regexp=False, access_control=etree.XSLTAccessControl.DENY_ALL)
 
 
 def is_trx(path: str) -> bool:

diff --git a/python/publish/xunit.py b/python/publish/xunit.py
@@ -6,7 +6,7 @@
 from publish.junit import JUnitTree, ParsedJUnitFile, progress_safe_parse_xml_file, xml_has_root_element
 
 with (pathlib.Path(__file__).resolve().parent / 'xslt' / 'xunit-to-junit.xslt').open('r', encoding='utf-8') as r:
-    transform_xunit_to_junit = etree.XSLT(etree.parse(r))
+    transform_xunit_to_junit = etree.XSLT(etree.parse(r), regexp=False, access_control=etree.XSLTAccessControl.DENY_ALL)
 
 
 def is_xunit(path: str) -> bool: