summaryrefslogtreecommitdiffhomepage
path: root/ios/osv-scanner.toml
blob: 6d05cc1f49b4417e81669ee99053a19cf07d10bb (plain)
1
2
3
4
5
6
7
8
# Entire package ignored since there is a constant stream of newly found regular expression attacks.
# All of these attacks rely on the input being malicious. We only use this package in our trusted
# build environment with trusted inputs.
[[PackageOverrides]]
effectiveUntil = 2025-05-01 # Ignored for 6 months at a time, it is unlikely to be an issue.
ignore = true
name = "rexml"
reason = "The XML payload is generated by Apple tooling which we trust"