Pastie Support Pastie or read my Pastie << self blog

def test_rexml_should_handle_dos_vulnerability
  # From http://p.ramaze.net/1887
  dom = REXML::Document.new('
  
    
    
    
    
    
    
  ]>
  
  &a;
  ')

  e = assert_raise RuntimeError do
    dom.root.elements.to_a('//member').first.text
  end
  assert_match(/\ANumber of entity expansions exceeded, processing aborted.$/, e.message)
end