Req #81210 [NEW]: Disable XML External Entities by config

From: mail at 12live dot de Operating system: PHP version: Irrelevant Package: PHP options/info functions Bug Type: Feature/Change Request Bug description:Disable XML External Entities by config Description: ------------ As XML External Entity is still a serious security risk, i would like to have the ini option to disable this globally PHP level. Ideally it would be disabled by default (as GO does) but I can understand if this is not feasible. At least not if PHP claims to be XML standard compliant by default. -- Edit bug report at https://bugs.php.net/bug.php?id=81210&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=81210&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=81210&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=81210&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=81210&r=needscript Try newer version: https://bugs.php.net/fix.php?id=81210&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=81210&r=support Expected behavior: https://bugs.php.net/fix.php?id=81210&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=81210&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=81210&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=81210&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=81210&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=81210&r=dst IIS Stability: https://bugs.php.net/fix.php?id=81210&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=81210&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=81210&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=81210&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=81210&r=mysqlcfg