Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Validates an XML file against XSDs, supports XSD version 1.1. Requires Java Runtime (version 8 or better).
Assert that my.xml
is valid according to schema schema.xsd
:
from xsd_validator import XsdValidator
validator = XsdValidator('schema.xsd')
validator.assert_valid('my.xml')
A more complex schema may be split between several files, for example: schema.xsd
, schema-aux.xsd
and xml.xsd
.
Just pass them all to the XsdValidator
:
from xsd_validator import XsdValidator
validator = XsdValidator('schema.xsd', 'schema-aux.xsd', 'xml.xsd')
validator.assert_valid('my.xml')
Sometimes you need to get all problems discovered. You can loop through the errors like this:
from xsd_validator import XsdValidator
validator = XsdValidator('schema.xsd', 'schema-aux.xsd', 'xml.xsd')
for err in validator('my.xml'):
print(err)
You can use xsd_validator
module as an executable, like this:
python -m xsd_validator
For example:
python -m xsd_validator schema.xsd my.xml
Help:
python -m xsd_validator -husage: xsd_validator [-h] xsd [xsd ...] xml
Validate an XML file againsd XSD schema (supports XSD version 1.1)
positional arguments:
xsd XSD files
xml XML file to check
optional arguments:
-h, --help show this help message and exit
FAQs
Validates XML file against XSD, supporting XSD versionj 1.1
We found that xsd-validator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.