Bug 1031035: xmlrpc can be DoS'd with billion laughs attack

r=LpSolit,a=glob

Bug 1031035: xmlrpc can be DoS'd with billion laughs attack
d5c47c9a · Byron Jones · b09ffb65 · d5c47c9a
Commit d5c47c9a authored Apr 15, 2015 by Byron Jones
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

XMLRPC.pm Bugzilla/WebService/Server/XMLRPC.pm +2 -1

No files found.
--- a/Bugzilla/WebService/Server/XMLRPC.pm
+++ b/Bugzilla/WebService/Server/XMLRPC.pm
@@ -135,7 +135,8 @@ sub new {
    my $self = shift->SUPER::new(@_);
    # Initialise XML::Parser to not expand references to entities, to prevent DoS
    require XML::Parser;
-    $self->{_parser}->parser(parser => XML::Parser->new( NoExpand => 1, Handlers => { Default => sub {} } ));
+    my $parser = XML::Parser->new( NoExpand => 1, Handlers => { Default => sub {} } );
+    $self->{_parser}->parser($parser, $parser);
    return $self;
 }