[116973] trunk/dports/python/py-elementtree/Portfile

snc at macports.org snc at macports.org
Tue Feb 11 09:57:40 PST 2014


Revision: 116973
          https://trac.macports.org/changeset/116973
Author:   snc at macports.org
Date:     2014-02-11 09:57:39 -0800 (Tue, 11 Feb 2014)
Log Message:
-----------
py-elementtree: add security warning to notes

Modified Paths:
--------------
    trunk/dports/python/py-elementtree/Portfile

Modified: trunk/dports/python/py-elementtree/Portfile
===================================================================
--- trunk/dports/python/py-elementtree/Portfile	2014-02-11 15:29:17 UTC (rev 116972)
+++ trunk/dports/python/py-elementtree/Portfile	2014-02-11 17:57:39 UTC (rev 116973)
@@ -53,3 +53,5 @@
     }
 }
 livecheck.type  none
+notes "Warning The xml.etree.ElementTree module is not secure against maliciously constructed data. If you need to parse untrusted or unauthenticated data see {http://docs.python.org/2/library/xml.html#xml-vulnerabilities XML vulnerabilities}."
+
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/macports-changes/attachments/20140211/0328b09a/attachment.html>


More information about the macports-changes mailing list