xml.sax parser validation sometimes fails when obtaining DTDs from https sites

Open

#76,311 opened on Nov 25, 2017 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 4/5
Estimated time: 3-5 days
Newbie friendliness: 30/100

Issue type: Bug
Clarity: Needs clarification
Activity status: Stale
Tech stack: python
Domain: backend, security

Research direction

Start with the xml.sax entry point and reproduce the reported validation failure when obtaining DTDs from an HTTPS site. Inspect the XML component and existing validation coverage; done means HTTPS DTD retrieval and parser validation work reliably. No specific source file or test is named in the issue.

Written by the indexing model from the issue text.

Description

topic-XML type-security

BPO	32130
Nosy	@mcepl, @failys

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = None
created_at = <Date 2017-11-25.11:05:53.848>
labels = ['type-security', 'expert-XML']
title = 'xml.sax parser validation sometimes fails when obtaining DTDs from https sites'
updated_at = <Date 2018-03-05.00:31:31.268>
user = 'https://github.com/failys'

bugs.python.org fields:

activity = <Date 2018-03-05.00:31:31.268>
actor = 'mcepl'
assignee = 'none'
closed = False
closed_date = None
closer = None
components = ['XML']
creation = <Date 2017-11-25.11:05:53.848>
creator = 'failys'
dependencies = []
files = []
hgrepos = []
issue_num = 32130
keywords = []
message_count = 1.0
messages = ['306952']
nosy_count = 2.0
nosy_names = ['mcepl', 'failys']
pr_nums = []
priority = 'normal'
resolution = None
stage = None
status = 'open'
superseder = None
type = 'security'
url = 'https://bugs.python.org/issue32130'
versions = ['Python 2.7']

Dominant language: Python
Stars: 77.2k
Forks: 36k
Avg merge: 1d 9h
Merged PRs (30d): 558

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[Correction] Update dsh-archived-chats metadata for Archive Management 1.4.1 Open

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

fendouai/awesome-deepseek-harness#88 · Opened Sep 21, 2026
[18.0+] account_edi_ubl_cii: IBR-022 wrongly reports "Invoiced quantity is missing" for invoice lines with quantity 0 Open

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

odoo/odoo#289575 · Opened Sep 21, 2026
Document TVD reference dependency in `create_rft_ertobs` Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

equinor/fmu-tools#514 · Opened Sep 21, 2026
`WandbCallback` config formatting fails on primitive values after #4164 Open

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

fastai/fastai#4173 · Opened Sep 21, 2026
[Bug] 发布机 Chrome applet 1.3 打开双语 Web 资产变英文（zh-hans 语言码不命中 zh-CN） Open

🐛 Bug 🔔 Pending processing

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

jumpserver/jumpserver#17584 · Opened Sep 21, 2026

More Python issues