diff options
| author | Christian Heimes <christian@python.org> | 2013-02-12 14:34:30 +0100 |
|---|---|---|
| committer | Christian Heimes <christian@python.org> | 2013-02-12 14:34:30 +0100 |
| commit | 83b7ff9ca3033ad42cc76d89a7a7a6ebb64dd682 (patch) | |
| tree | 7a91a5b7f119ea4a9322b3656c9852ca9b2f9f0e /README.txt | |
| parent | bd776a52f973702621ae056ff1d9f667b8cf390c (diff) | |
| download | defusedxml-git-83b7ff9ca3033ad42cc76d89a7a7a6ebb64dd682.tar.gz | |
thank you to my employer
Diffstat (limited to 'README.txt')
| -rw-r--r-- | README.txt | 6 |
1 files changed, 5 insertions, 1 deletions
@@ -42,7 +42,7 @@ billion laughs / exponential entity expansion A `Billion Laughs`_ attacks -- also known as exponential entity expansion -- uses multiple levels of nested entities. The original example uses 9 levels -of 10 expasnions each to expand the string "lol" to a string of +of 10 expansions each to expand the string ``lol`` to a string of 3 * 10 :sup:`9` Bytes, hence the name billion laughs. The resulting string occupies 3 GB (2.79 GiB) memory, intermediate strings require additional memory. Because most parsers don't cache intermediate step every @@ -248,6 +248,10 @@ Contributors Brett Cannon <brett@python.org> review and code cleanup +I like to thank my employer Semantics GmbH (http://www.semantics.de) for +letting me work on the issue during working hours as part of Semantics's +open source initiative. + .. _defusedxml package: https://bitbucket.org/tiran/defusedxml .. _defusedexpat package: https://bitbucket.org/tiran/defusedexpat |