Commit da76aa8e authored by Gregory P. Smith's avatar Gregory P. Smith

Fix typos and clear up one very odd bit of wording as pointed out by

Ezio.
parent e66e7de5
...@@ -108,20 +108,22 @@ all known attack vectors with examples and references. ...@@ -108,20 +108,22 @@ all known attack vectors with examples and references.
defused packages defused packages
---------------- ----------------
These external packages are recommended for any code that parses
untrusted XML data.
`defusedxml`_ is a pure Python package with modified subclasses of all stdlib `defusedxml`_ is a pure Python package with modified subclasses of all stdlib
XML parsers that prevent any potentially malicious operation. The courses of XML parsers that prevent any potentially malicious operation. The
action are recommended for any server code that parses untrusted XML data. The package also ships with example exploits and extended documentation on more
package also ships with example exploits and an extended documentation on more
XML exploits like xpath injection. XML exploits like xpath injection.
`defusedexpat`_ provides a modified libexpat and patched replacment `defusedexpat`_ provides a modified libexpat and patched replacement
:mod:`pyexpat` extension module with countermeasures against entity expansion :mod:`pyexpat` extension module with countermeasures against entity expansion
DoS attacks. Defusedexpat still allows a sane and configurable amount of entity DoS attacks. Defusedexpat still allows a sane and configurable amount of entity
expansions. The modifications will be merged into future releases of Python. expansions. The modifications will be merged into future releases of Python.
The workarounds and modifications are not included in patch releases as they The workarounds and modifications are not included in patch releases as they
break backward compatibility. After all inline DTD and entity expansion are break backward compatibility. After all inline DTD and entity expansion are
well-definied XML features. well-defined XML features.
.. _defusedxml: https://pypi.python.org/pypi/defusedxml/ .. _defusedxml: https://pypi.python.org/pypi/defusedxml/
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment