summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGregory P. Smith <greg@krypto.org>2013-03-30 08:38:38 (GMT)
committerGregory P. Smith <greg@krypto.org>2013-03-30 08:38:38 (GMT)
commit0861b13c981b93364db8a5bc184840acd4805497 (patch)
treefe3b9cee577d26bff40b72393ddc00a1af73fa79
parentbf607aa9da0c2a0c602bdfd397a606d06d9a2119 (diff)
downloadcpython-0861b13c981b93364db8a5bc184840acd4805497.zip
cpython-0861b13c981b93364db8a5bc184840acd4805497.tar.gz
cpython-0861b13c981b93364db8a5bc184840acd4805497.tar.bz2
Fix typos and clear up one very odd bit of wording as pointed out by
Ezio.
-rw-r--r--Doc/library/xml.rst12
1 files changed, 7 insertions, 5 deletions
diff --git a/Doc/library/xml.rst b/Doc/library/xml.rst
index a800813..88b8505 100644
--- a/Doc/library/xml.rst
+++ b/Doc/library/xml.rst
@@ -108,20 +108,22 @@ all known attack vectors with examples and references.
defused packages
----------------
+These external packages are recommended for any code that parses
+untrusted XML data.
+
`defusedxml`_ is a pure Python package with modified subclasses of all stdlib
-XML parsers that prevent any potentially malicious operation. The courses of
-action are recommended for any server code that parses untrusted XML data. The
-package also ships with example exploits and an extended documentation on more
+XML parsers that prevent any potentially malicious operation. The
+package also ships with example exploits and extended documentation on more
XML exploits like xpath injection.
-`defusedexpat`_ provides a modified libexpat and patched replacment
+`defusedexpat`_ provides a modified libexpat and patched replacement
:mod:`pyexpat` extension module with countermeasures against entity expansion
DoS attacks. Defusedexpat still allows a sane and configurable amount of entity
expansions. The modifications will be merged into future releases of Python.
The workarounds and modifications are not included in patch releases as they
break backward compatibility. After all inline DTD and entity expansion are
-well-definied XML features.
+well-defined XML features.
.. _defusedxml: https://pypi.python.org/pypi/defusedxml/