/ 
XML-Simple-2.15
Security Advisories (1)
CPANSA-XML-Simple-2018-01 (2018-02-18)

The No. 4 item on the OWASP top 10 is external XML entities. When using XML::Parser, XML::Simple is currently vulnerable by default.

Changes for version 2.15

  • Makefile.PL changes: reject known-bad PurePerl and RTF parser modules; default to XML::SAX::Expat if no parser installed
  • allow '.' characters in variable names (suggested by Cosimo Streppone)
  • fix output of undefs in arrayrefs with SuppressEmpty (reported by かんな - Kanna)
  • tidy up code and docs around lexical filehandle passed to OutputFile (report from Helge Sauer)
  • reduce memory usage by passing XML strings by reference (patch from Dan Sully)

Documentation

XML::Simple::FAQ

Modules

XML::Simple
Easy API to maintain XML (esp config files)

Other files