fix: security bug

NaturalIntelligence · Jun 6, 2023 · 0955739 · 0955739
1 parent abfee16
commit 0955739
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/xmlparser/DocTypeReader.js b/src/xmlparser/DocTypeReader.js
@@ -142,7 +142,7 @@ function isNotation(xmlData, i){
 
 //an entity name should not contains special characters that may be used in regex
 //Eg !?\\\/[]$%{}^&*()<>
-const specialChar = "!?\\\/[]$%{}^&*()<>";
+const specialChar = "!?\\\/[]$%{}^&*()<>|+";
 
 function validateEntityName(name){
     for (let i = 0; i < specialChar.length; i++) {