github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-08-02 00:08:43 +00:00
Code Issues Projects Releases Wiki Activity

config-tools: replace xml.etree.ElementTree with defusedxml.ElementTree

Browse Source 
Using xml.etree.ElementTree to parse the untrusted data is known to
raise security issue. Replaced it using defusedxml.

Tracked-On: #6342
Signed-off-by: Yang,Yu-chu <yu-chu.yang@intel.com>
This commit is contained in:
Yang,Yu-chu 2021-07-29 14:02:50 -07:00 committed by wenlingz
parent c10ac227cc
commit 668ae81048
4 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/getting-started/building-from-source.rst
View File

@ -80,7 +80,7 @@ ACRN.
xsltproc \ xsltproc \
clang-format clang-format
sudo pip3 install lxml xmlschema sudo pip3 install lxml xmlschema defusedxml
wget https://acpica.org/sites/acpica/files/acpica-unix-20210105.tar.gz wget https://acpica.org/sites/acpica/files/acpica-unix-20210105.tar.gz
tar zxvf acpica-unix-20210105.tar.gz tar zxvf acpica-unix-20210105.tar.gz

2
doc/getting-started/getting-started.rst
View File

@ -180,7 +180,7 @@ Build the ACRN Hypervisor on Ubuntu
xsltproc \ xsltproc \
clang-format clang-format
$ sudo pip3 install lxml xmlschema $ sudo pip3 install lxml xmlschema defusedxml
#. Starting with the ACRN v2.2 release, we use the ``iasl`` tool to #. Starting with the ACRN v2.2 release, we use the ``iasl`` tool to
compile an offline ACPI binary for pre-launched VMs while building ACRN, compile an offline ACPI binary for pre-launched VMs while building ACRN,

1
misc/config_tools/config_app/requirements
View File

@ -2,3 +2,4 @@ Flask==1.1.1
flask_bootstrap==3.3.7.1 flask_bootstrap==3.3.7.1
xmlschema==1.4.1 xmlschema==1.4.1
lxml==4.6.2 lxml==4.6.2
defusedxml==0.7.1

2
misc/config_tools/library/common.py
View File

@ -8,7 +8,7 @@ import sys
import getopt import getopt
import shutil import shutil
import subprocess # nosec import subprocess # nosec
import xml.etree.ElementTree as ET import defusedxml.ElementTree as ET
import re import re
import lxml import lxml