summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
Diffstat (limited to 'doc')
-rw-r--r--doc/implementation_notes.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/implementation_notes.md b/doc/implementation_notes.md
index 3b8e49d..cbf76ee 100644
--- a/doc/implementation_notes.md
+++ b/doc/implementation_notes.md
@@ -64,7 +64,7 @@ to the filesystem. This ensures that every metadata is removed.
64XML attacks 64XML attacks
65----------- 65-----------
66 66
67Since our thread model conveniently excludes files crafted to specifically 67Since our threat model conveniently excludes files crafted to specifically
68bypass MAT2, fileformats containing harmful XML are out of our scope. 68bypass MAT2, fileformats containing harmful XML are out of our scope.
69But since MAT2 is using [etree](https://docs.python.org/3/library/xml.html#xml-vulnerabilities) 69But since MAT2 is using [etree](https://docs.python.org/3/library/xml.html#xml-vulnerabilities)
70to process XML, it's "only" vulnerable to DoS, and not memory corruption: 70to process XML, it's "only" vulnerable to DoS, and not memory corruption: