Share via

XmlReaderProperty_MaxEntityExpansion (Compact 2013)

  • Article

3/26/2014

This property lets the user set the maximum number of entities that resolve to three or more characters. The type of this property is integer.

The default value is 100,000.

Remarks

This property can be set through the SetProperty (IXmlReader) method and retrieved through GetProperty (IXmlReader) method.

Character entities, and entities that resolve to 2 characters, are not counted. This property lets users mitigate against Document Type Definition (DTD) entity expansion attacks. The maximum number includes both general entities and parameter entities.

A value of 0 specifies that entity expansion is not limited.

See Also

Reference

IXmlReader Properties
SetProperty (IXmlReader)
GetProperty (IXmlReader)
XmlReaderProperty_MaxElementDepth
IXmlReader Methods