php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-04-21 23:18:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
123,051 Commits 549 Branches 1,484 Tags
6ffa9b118adddae002fdd37d2671e5584b2d03b6
Commit Graph

5 Commits

Author SHA1 Message Date
Dik Takken e0fa48f69d Deprecate libxml_disable_entity_loader() 
This method was used to protect code against XXE processing attacks.
Since PHP now requires libxml >= 2.9.0 external entity loading no longer
needs to be disabled to prevent these attacks. It is disabled by default.
Also, the method has an unwanted side effect that causes a lot of
confusion: Parsing XML data from resources like files is no longer possible.

Closes GH-5867.
 2020-08-03 21:53:29 +02:00
Christoph M. Becker 24495ba778 Merge branch 'PHP-7.4' into master 
* PHP-7.4:
  Enable libxml entity loader test case on Windows
 2020-08-03 09:15:50 +02:00
Christoph M. Becker d4b32e82c8 Enable libxml entity loader test case on Windows 2020-08-03 09:13:30 +02:00
Christoph M. Becker ac282a90f1 Add skip reasons 2019-09-22 19:14:30 +02:00
Scott MacVicar 24cc7c0be2 [libxml] Unit test for libxml_disable_entity_loader() 
Summary:
Test to make sure libxml_disable_entity_loader() is behaving.
 2014-01-06 17:04:54 +00:00