Files
espeak-ng/tests/ssml/external-entity.ssml
T
Sascha Brawer 7e669f1812 Add tests on SSML parsing
A corpus of SSML input files will also be needed for fuzzing.
https://github.com/espeak-ng/espeak-ng/issues/407
2018-03-02 11:32:36 +01:00

13 lines
373 B
XML

<?xml version="1.0"?>
<!-- SSML version of the “XML External Entity” attack
https://en.wikipedia.org/wiki/XML_external_entity_attack
-->
<!DOCTYPE test [
<!ENTITY xxeattack SYSTEM "file:///etc/passwd">
]>
<speak version="1.1" xmlns="http://www.w3.org/2001/10/synthesis"
xml:lang="en-US">
<p>Here are the passwords:</p>
<p>&xxeattack;</p>
</speak>