in reply to Re^2: Best XML library to validate XML from untrusted source
in thread Best XML library to validate XML from untrusted source

I think you're supposed to disable external requests using various constructor parameters (as in XML::LibXML::Parser.pod.

I presume that ext_ent_handler with your own callback to handle external entities would be enough, but I would still use or no_network to be on the safe(r) side.

Replies are listed 'Best First'.
Re^4: Best XML library to validate XML from untrusted source
by vsespb (Chaplain) on Oct 19, 2014 at 15:45 UTC
    Ok, this indeed works. And the POD page contains security related info. Thanks!