Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Changes for version 0.04

  • BACKWARDS INCOMPABILITY: <content> elements are now represented as XML::Atom::Content objects instead of just get/set accessors. You can still set XML::Atom::Entry::content with a scalar (it will be automatically upgraded to an XML::Atom::Content object), but to get the value of <content>, you need to call XML::Atom::Content::Body. For example: $entry->content->body
  • XML::Atom::Entry::content now removes the <div> wrapper from XHTML <content> when called with no arguments.
  • Changed XML::Atom::Author to XML::Atom::Person and re-implemented it.
  • Changed "WSSE" to "UsernameToken" in X-WSSE header.

Modules

Atom feed and API implementation
A client for the Atom API
Atom entry
Atom feed
Author or contributor object
Utility functions

Provides

in lib/XML/Atom/Content.pm
in lib/XML/Atom/ErrorHandler.pm
in lib/XML/Atom.pm
in lib/XML/Atom/Thing.pm