Changes for version 1.0.2 - 2014-01-21
- MARC::File::XML will now die upon parsing a record that declares an external entity and tries to use it. This prevents the potential unwanted disclosure of the contents of files on the server by applications that embed this module. If, for some reason, an application needs to process MARCXML records that contain external entities, set_parser() can be used to force the use of an XML::LibXML parser that is configured to process external entities.
- The issue was reported by John Lightsey.
- MARC::File::XML - Work with MARC data encoded as XML