metasploit-framework

https://github.com/rapid7/metasploit-framework

Ruby

Metasploit Framework

Msftidy#check_nokogiri

Updated this check to see if Nokogiri::XML.parse is being called
specifically. The main reason for this concern is that some versions
of libxml2 are still vulnerable to XXE attacks. REXML is safer (and
slower) since it's pure ruby. Unfortunately, there is no pure Ruby
HTML parser (except Hpricot which is abandonware) -- easy checks
can avoid Nokogiri (most modules use regex anyway), but more complex
checks tends to require Nokogiri for HTML element and value parsing.

Source | Google | Stack overflow

Edit

git clone [email protected]:rapid7/metasploit-framework.git

cd metasploit-framework

open tools/dev/msftidy.rb

Contribute

# Make a new branch

git checkout -b -your-name--update-docs-Msftidy-check_nokogiri-for-pr

# Commit to git

git add tools/dev/msftidy.rbgit commit -m "better docs for Msftidy#check_nokogiri"

# Open pull request

gem install hub # on a mac you can `brew install hub`

hub fork

git push <your name> -your-name--update-docs-Msftidy-check_nokogiri-for-pr

hub pull-request

# Celebrate!