config_xml.go

package config

import (
	"bytes"
	"encoding/xml"
)

// UnmarshalXML parses the XML-encoded data and stores the result in
// the value pointed to by v, which must be an arbitrary struct,
// slice, or string. Well-formed data that does not fit into v is
// discarded.
//
// Security: This function uses xml.Decoder with strict settings to prevent
// XXE (XML External Entity) attacks.
func UnmarshalXML(content []byte, v interface{}) error {
	decoder := xml.NewDecoder(bytes.NewReader(content))
	// Note: Go's xml package doesn't process external entities by default
	// This explicit usage of Decoder provides clarity and future-proofing
	return decoder.Decode(v)
}

// MarshalXML returns the XML encoding of v.
func MarshalXML(v interface{}) (out []byte, err error) {
	return xml.Marshal(v)
}

// MarshalXMLString returns the XML encoding string format of v.
func MarshalXMLString(v interface{}) (out string) {
	marshal, err := xml.Marshal(v)
	if err != nil {
		return ""
	}
	return string(marshal)
}