summaryrefslogtreecommitdiff
path: root/doc/source/config.rst
diff options
context:
space:
mode:
Diffstat (limited to 'doc/source/config.rst')
-rw-r--r--doc/source/config.rst7
1 files changed, 4 insertions, 3 deletions
diff --git a/doc/source/config.rst b/doc/source/config.rst
index 10b0afd..63ddf7b 100644
--- a/doc/source/config.rst
+++ b/doc/source/config.rst
@@ -293,14 +293,15 @@ It can either be ``enabled`` or ``disabled`` and can be used in ``simulation`` m
293 sp.upload_validation.script("/var/www/is_valid_php.py").enable(); 293 sp.upload_validation.script("/var/www/is_valid_php.py").enable();
294 294
295 295
296disable_xxe 296xxe_protection
297^^^^^^^^^^^ 297^^^^^^^^^^^
298 298
299:ref:`disable_xxe <xxe-feature>`, enabled by default, will prevent XXE attacks by disabling the loading of external entities (``libxml_disable_entity_loader``) in the XML parser. 299:ref:`xxe_protection <xxe-feature>`, disabled by default, will prevent XXE attacks by disabling the loading of external entities (``libxml_disable_entity_loader``) in the XML parser.
300 300
301:: 301::
302 302
303 sp.disable_xxe.enable(); 303 sp.xxe_protection.enable();
304 sp.xxe_protection.disable();
304 305
305 306
306Whitelist of stream-wrappers 307Whitelist of stream-wrappers