Protect against security exploits via system identifier in DTD declaration [SPR-11768] #16390
Description
Rossen Stoyanchev opened SPR-11768 and commented
A DTD declaration contains a system identifier, which can be exploited for example to scan for valid URLs gauged by the response time (quick response=valid, slower response=not valid) or can potentially be further combined with other vulnerabilities where simply accessing a URL can have side effects.
Example DTD declaration:
<!DOCTYPE html SYSTEM "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">Affects: 3.2.8, 4.0.4
Attachments:
- SPR-11768.patch (13.66 kB)
Backported to: 3.2.9