registry: Set libxml2 context options

xkbcommon · Oct 13, 2024 · 3f5452e · 3f5452e
1 parent c6032ce
commit 3f5452e
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/registry.c b/src/registry.c
@@ -1258,6 +1258,13 @@ parse(struct rxkb_context *ctx, const char *path,
     if (!xmlCtxt)
         return false;
 
+#ifdef XML_PARSE_NO_XXE
+#define _XML_OPTIONS (XML_PARSE_NONET | XML_PARSE_NOENT | XML_PARSE_NO_XXE)
+#else
+#define _XML_OPTIONS (XML_PARSE_NONET)
+#endif
+    xmlCtxtUseOptions(xmlCtxt, _XML_OPTIONS);
+
 #ifdef HAVE_XML_CTXT_SET_ERRORHANDLER
     /* Prefer contextual handler whenever possible. It takes precedence over
      * the global generic handler. */