entropy-auth 2026.7.31

Authentication and authorization for Entropy Softworks server and API projects
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

//! Minimal XML parser with security hardening for SAML processing.
//!
//! # Security
//! - No DTD processing (prevents XXE attacks)
//! - No external entity resolution (prevents SSRF)
//! - Maximum depth limit (prevents billion-laughs)
//! - Maximum document size limit

mod parser;

pub use self::parser::{XmlElement, XmlParseError, parse_xml, xml_escape};

/// Shared with the SAML layer so it can bound base64 input before decoding;
/// kept crate-internal rather than part of the public API.
pub(crate) use self::parser::MAX_XML_SIZE;