When configuring XML parsing options, carefully evaluate security implications of each setting, especially those that enable potentially risky features like DTD processing. Document the business justification for enabling such features and verify that the chosen library provides adequate protection against common XML-based attacks (XXE, DTD attacks, etc.).
Example of secure XML parsing configuration:
let doc = roxmltree::Document::parse_with_options(
xml_content,
roxmltree::ParsingOptions {
allow_dtd: true, // Enable only when necessary for business requirements
..Default::default()
},
)?;
Always include comments explaining why potentially dangerous options are enabled and confirm the library’s security guarantees against relevant attack vectors.
Enter the URL of a public GitHub repository