CHANGES.txt 1.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
  1. Changelog
  2. =========
  3. defusedxml 0.5.0
  4. ----------------
  5. *Release date: 07-Feb-2017*
  6. - No changes
  7. defusedxml 0.5.0.rc1
  8. --------------------
  9. *Release date: 28-Jan-2017*
  10. - Add compatibility with Python 3.6
  11. - Drop support for Python 2.6, 3.1, 3.2, 3.3
  12. - Fix lxml tests (XMLSyntaxError: Detected an entity reference loop)
  13. defusedxml 0.4.1
  14. ----------------
  15. *Release date: 28-Mar-2013*
  16. - Add more demo exploits, e.g. python_external.py and Xalan XSLT demos.
  17. - Improved documentation.
  18. defusedxml 0.4
  19. --------------
  20. *Release date: 25-Feb-2013*
  21. - As per http://seclists.org/oss-sec/2013/q1/340 please REJECT
  22. CVE-2013-0278, CVE-2013-0279 and CVE-2013-0280 and use CVE-2013-1664,
  23. CVE-2013-1665 for OpenStack/etc.
  24. - Add missing parser_list argument to sax.make_parser(). The argument is
  25. ignored, though. (thanks to Florian Apolloner)
  26. - Add demo exploit for external entity attack on Python's SAX parser, XML-RPC
  27. and WebDAV.
  28. defusedxml 0.3
  29. --------------
  30. *Release date: 19-Feb-2013*
  31. - Improve documentation
  32. defusedxml 0.2
  33. --------------
  34. *Release date: 15-Feb-2013*
  35. - Rename ExternalEntitiesForbidden to ExternalReferenceForbidden
  36. - Rename defusedxml.lxml.check_dtd() to check_docinfo()
  37. - Unify argument names in callbacks
  38. - Add arguments and formatted representation to exceptions
  39. - Add forbid_external argument to all functions and classs
  40. - More tests
  41. - LOTS of documentation
  42. - Add example code for other languages (Ruby, Perl, PHP) and parsers (Genshi)
  43. - Add protection against XML and gzip attacks to xmlrpclib
  44. defusedxml 0.1
  45. --------------
  46. *Release date: 08-Feb-2013*
  47. - Initial and internal release for PSRT review