Security Advisories (2)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

Changes for version 1.31

  • Removed C-layer parser implementation.
  • Added support for prefixes in find* functions
  • More memory leak fixes (in custom DOMs)
  • Allow global callbacks

Documentation

The DOM Attribute Class
The DOM CDATASection Class
The DOM Comment Class
DOM Document Class
DOM L2 Implementation of a Document Fragment
A Class implementing Dtd Nodes
The DOM Element Class
A Namespace Class to hold namespace nodes
"virtual" Base Class DOM-Nodes
The DOM Text Node Class

Modules

Interface to the gnome libxml2 library
Boolean true/false values
Simple string values.
a list of XML document nodes
Simple numeric values.
build a LibXML tree from SAX events
Generate SAX events from a LibXML tree
LibXML DOM based SAX Parser

Provides

in lib/XML/LibXML/SAX/Generator.pm