security(quick-xml): bump version to 0.41.0
- and protect amount of properties - azure_core 0.21.0 is using quick-xml 0.31.0 which is Dos-able azure_core is no more maintained, would migrte to official azure lib later
This commit is contained in:
@@ -203,7 +203,10 @@ impl WopiDiscoveryService {
|
||||
|
||||
for attr in e.attributes().flatten() {
|
||||
let value = attr
|
||||
.decode_and_unescape_value(reader.decoder())
|
||||
.decoded_and_normalized_value(
|
||||
quick_xml::XmlVersion::Implicit1_0,
|
||||
reader.decoder(),
|
||||
)
|
||||
.map(|value| value.into_owned())
|
||||
.unwrap_or_else(|_| String::from_utf8_lossy(&attr.value).to_string());
|
||||
|
||||
|
||||
Reference in New Issue
Block a user