[issue18789] XML Vunerability Table Unclear
New submission from Joe Tennies: EASY This is an issue with the 2.x and 3.x documentation. http://docs.python.org/3.2/library/xml.html#xml-vulnerabilities http://docs.python.org/dev/library/xml.html#xml-vulnerabilities http://docs.python.org/2/library/xml.html#xml-vulnerabilities This section has a table with a bunch of Trues and Falses. This is a bit confusing, especially for something that is trying to describe security concerns. After looking at the table, I'm pretty sure that True means vunerable (only due to the (1), (2), & (3) comments), but it's not clear. All that is needed is a heading stating "Vunerable", or change the "True" to "Vunerable" and "False" to "Not Vunerable" (probably V and NV w/ a legend). ---------- assignee: docs@python components: Documentation messages: 195691 nosy: docs@python, joe-tennies priority: normal severity: normal status: open title: XML Vunerability Table Unclear type: security versions: Python 2.7, Python 3.2, Python 3.3, Python 3.4, Python 3.5 _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Changes by Christian Heimes <lists@cheimes.de>: ---------- nosy: +christian.heimes _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Changes by Serhiy Storchaka <storchaka@gmail.com>: ---------- components: +XML versions: -Python 3.2, Python 3.5 _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Mark Lawrence added the comment: @Joe The latest documentation has an additional sentence above the table "The following table gives an overview of the known attacks and whether the various modules are vulnerable to them." and the table has been changed to say Yes or No. Is this okay with you? ---------- nosy: +BreamoreBoy _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Raymond Hettinger added the comment: The table would still be more clear with "safe" and "vulnerable" entries. ---------- nosy: +rhettinger _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Changes by Christian Heimes <lists@cheimes.de>: ---------- keywords: +easy type: security -> enhancement versions: +Python 3.5, Python 3.6, Python 3.7 -Python 3.3, Python 3.4 _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Changes by Mark Lawrence <breamoreboy@yahoo.co.uk>: ---------- nosy: -BreamoreBoy _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Changes by Mariatta Wijaya <mariatta.wijaya@gmail.com>: ---------- nosy: +Mariatta _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Mariatta Wijaya added the comment: I'll work on this :) ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Mariatta Wijaya added the comment: Hi, here is the patch. I followed Raymond's suggestion to use 'vulnerable' or 'safe' instead of the original 'True' or 'False'. Please check it out. Thanks :) ---------- keywords: +patch Added file: http://bugs.python.org/file44994/issue18789.patch _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Roundup Robot added the comment: New changeset e05c546062a1 by Guido van Rossum in branch '3.5': Issue #18789: Update XML vulnerability table to use Safe/Vulnerable instead of No/Yes. https://hg.python.org/cpython/rev/e05c546062a1 New changeset beed43d7dc46 by Guido van Rossum in branch '3.6': Issue #18789: Update XML vulnerability table to use Safe/Vulnerable instead of No/Yes. (3.5->3.6) https://hg.python.org/cpython/rev/beed43d7dc46 New changeset 9513fac97ddd by Guido van Rossum in branch 'default': Issue #18789: Update XML vulnerability table to use Safe/Vulnerable instead of No/Yes. (3.6->3.7) https://hg.python.org/cpython/rev/9513fac97ddd ---------- nosy: +python-dev _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Guido van Rossum added the comment: Thanks again! ---------- nosy: +gvanrossum resolution: -> fixed stage: -> resolved status: open -> closed _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
Roundup Robot added the comment: New changeset 760403522d6b by Guido van Rossum in branch '2.7': Issue #18789: Update XML vulnerability table to use Safe/Vulnerable instead of No/Yes. (backport to 2.7) https://hg.python.org/cpython/rev/760403522d6b ---------- _______________________________________ Python tracker <report@bugs.python.org> <http://bugs.python.org/issue18789> _______________________________________
participants (8)
-
Christian Heimes -
Guido van Rossum
-
Joe Tennies
-
Mariatta Wijaya
-
Mark Lawrence
-
Raymond Hettinger
-
Roundup Robot
-
Serhiy Storchaka