/ 
XML-Atom-0.02
River stage three • 46 direct dependents • 174 total dependents
Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Changes for version 0.02

  • Completely revamped authentication mechanism to use X-WSSE header (or corresponding SOAP headers).
  • Removed 03-client.t test, because there aren't any publicly available servers to test against. (Are there?)
  • Added support for SOAP wrapper in API client.
  • Added namespace support in XML::Atom::Namespace using get and set methods in XML::Atom::Entry and XML::Atom::Feed.
  • Added namespace normalization for produced XML (if XML::LibXSLT is installed). This is really just a cosmetic thing.

Modules

XML::Atom
Atom feed and API implementation
XML::Atom::API
A client for the Atom API
XML::Atom::Entry
Atom entry
XML::Atom::Feed
Atom feed
XML::Atom::Util
Utility functions

Provides

XML::Atom::ErrorHandler
in lib/XML/Atom/ErrorHandler.pm
XML::Atom::Namespace
in lib/XML/Atom.pm
XML::Atom::Thing
in lib/XML/Atom/Thing.pm

Other files