summaryrefslogtreecommitdiffhomepage
path: root/ios/osv-scanner.toml
blob: 52e72df6aca24f05874bfb9cfd7ce2cbca28ca43 (plain)
1
2
3
4
5
6
7
8
# Entire package ignored since there is a constant stream of newly found regular expression attacks.
# All of these attacks rely on the input being malicious. We only use this package in our trusted
# build environment with trusted inputs.
[[PackageOverrides]]
effectiveUntil = 2025-11-01 # Ignored for 6 months at a time, it is unlikely to be an issue.
ignore = true
name = "rexml"
reason = "The XML payload is generated by Apple tooling which we trust"