tree d49b420f7d588d66db0e777971dc9aa680ea48d6
parent 46a6378789fdc75e5b00d8009b136462bdd97174
author Ivan Frade <ifrade@google.com> 1747160502 -0700
committer Matthias Sohn <matthias.sohn@sap.com> 1747265138 +0200

ManifestParser: Do not accept DOCTYPE and entities

These open the door for XXE attacks [1] and manifest do not need them.

[1] https://en.wikipedia.org/wiki/XML_external_entity_attack

Change-Id: Ia79971e1c34afaf287584ae4a7f71baebcb48b6a