/ 
XML-LibXML-1.30
Security Advisories (2)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

Changes for version 1.30

  • Full PI access
  • New parser implementation (safer)
  • Callbacks API changed to be on the object, not the class
  • SAX uses XML::SAX now (required)
  • Memory leak fixes

Documentation

XML::LibXML::Attr
The DOM Attribute Class
XML::LibXML::CDATASection
The DOM CDATASection Class
XML::LibXML::Comment
The DOM Comment Class
XML::LibXML::Document
DOM Document Class
XML::LibXML::DocumentFragment
DOM L2 Implementation of a Document Fragment
XML::LibXML::Dtd
A Class implementing Dtd Nodes
XML::LibXML::Element
The DOM Element Class
XML::LibXML::Namespace
A Namespace Class to hold namespace nodes
XML::LibXML::Node
"virtual" Base Class DOM-Nodes
XML::LibXML::Text
The DOM Text Node Class

Modules

XML::LibXML
Interface to the gnome libxml2 library
XML::LibXML::Boolean
Boolean true/false values
XML::LibXML::Literal
Simple string values.
XML::LibXML::NodeList
a list of XML document nodes
XML::LibXML::Number
Simple numeric values.
XML::LibXML::SAX::Builder
build a LibXML tree from SAX events
XML::LibXML::SAX::Generator
Generate SAX events from a LibXML tree
XML::LibXML::SAX::Parser
LibXML DOM based SAX Parser

Provides

XML::LibXML::SAX::AttributeNode
in lib/XML/LibXML/SAX/Generator.pm

Examples

Other files