This avoids XML-injection by a malformed property value. If a property value is controlled by a less privileged entity (like Management VM), it could lead to a privilege escalation. Reported by @DemiMarie |
||
|---|---|---|
| .. | ||
| mix | ||
| __init__.py | ||
| adminvm.py | ||
| appvm.py | ||
| dispvm.py | ||
| init.py | ||
| qubesvm.py | ||