diff options
| author | Andrew Arnott <andrewarnott@gmail.com> | 2012-09-29 16:31:11 -0700 |
|---|---|---|
| committer | Andrew Arnott <andrewarnott@gmail.com> | 2012-09-29 16:31:11 -0700 |
| commit | 951ff6271a3a064bfc6f7809222fe13bef72426d (patch) | |
| tree | 67c41418622a9979cdbc1c3b65e401959015419f /src/DotNetOpenAuth.Core/Messaging/MessagingUtilities.cs | |
| parent | 90cbeeca143a9485d354d66632d3f75c593974e6 (diff) | |
| parent | 5ceb75f6632a70c564b4556500b9c3e5a98bfa73 (diff) | |
| download | DotNetOpenAuth-951ff6271a3a064bfc6f7809222fe13bef72426d.zip DotNetOpenAuth-951ff6271a3a064bfc6f7809222fe13bef72426d.tar.gz DotNetOpenAuth-951ff6271a3a064bfc6f7809222fe13bef72426d.tar.bz2 | |
Merge branch 'v4.0' into v4.1
Diffstat (limited to 'src/DotNetOpenAuth.Core/Messaging/MessagingUtilities.cs')
| -rw-r--r-- | src/DotNetOpenAuth.Core/Messaging/MessagingUtilities.cs | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/src/DotNetOpenAuth.Core/Messaging/MessagingUtilities.cs b/src/DotNetOpenAuth.Core/Messaging/MessagingUtilities.cs index e821953..2973c72 100644 --- a/src/DotNetOpenAuth.Core/Messaging/MessagingUtilities.cs +++ b/src/DotNetOpenAuth.Core/Messaging/MessagingUtilities.cs @@ -356,6 +356,27 @@ namespace DotNetOpenAuth.Messaging { return realmUrl.Uri; } + /// Creates the XML reader settings to use for reading XML from untrusted sources. + /// </summary> + /// <returns> + /// The new instance of <see cref="XmlReaderSettings"/>. + /// </returns> + /// <remarks> + /// The default values set here are based on recommendations from + /// http://msdn.microsoft.com/en-us/magazine/ee335713.aspx + /// </remarks> + internal static XmlReaderSettings CreateUntrustedXmlReaderSettings() { + return new XmlReaderSettings { + MaxCharactersFromEntities = 1024, + XmlResolver = null, +#if CLR4 + DtdProcessing = DtdProcessing.Prohibit, +#else + ProhibitDtd = true, +#endif + }; + } + /// <summary> /// Clears any existing elements in a collection and fills the collection with a given set of values. /// </summary> |