com php-src: Disabled external entities loading: ext/soap/php _xml.c
| From: | Stanislav Malyshev | Date: | Sun, 10 Feb 2013 09:05:36 +0000 |
| Subject: | com php-src: Disabled external entities loading: ext/soap/php _xml.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-71219@lists.php.net to get a copy of this message | ||
Commit: f2b5b9d69e3eab6fabf208ce7e3b1de5d3809c6f
Author: Dmitry Stogov <dmitry@zend.com> Thu, 7 Feb 2013 16:07:05 +0400
Committer: Stanislav Malyshev <stas@php.net> Sun, 10 Feb 2013 01:05:36 -0800
Parents: c5b33c754c5c4aea219c74a316db0a872ac5f70d
Branches: PHP-5.4.12
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=f2b5b9d69e3eab6fabf208ce7e3b1de5d3809c6f
Log:
Disabled external entities loading
Changed paths:
M ext/soap/php_xml.c
Diff:
diff --git a/ext/soap/php_xml.c b/ext/soap/php_xml.c
index cf7fead..866cbe3 100644
--- a/ext/soap/php_xml.c
+++ b/ext/soap/php_xml.c
@@ -92,6 +92,7 @@ xmlDocPtr soap_xmlParseFile(const char *filename TSRMLS_DC)
PG(allow_url_fopen) = old_allow_url_fopen;
if (ctxt) {
ctxt->keepBlanks = 0;
+ ctxt->options -= XML_PARSE_DTDLOAD;
ctxt->sax->ignorableWhitespace = soap_ignorableWhitespace;
ctxt->sax->comment = soap_Comment;
ctxt->sax->warning = NULL;
@@ -133,6 +134,7 @@ xmlDocPtr soap_xmlParseMemory(const void *buf, size_t buf_size)
*/
ctxt = xmlCreateMemoryParserCtxt(buf, buf_size);
if (ctxt) {
+ ctxt->options -= XML_PARSE_DTDLOAD;
ctxt->sax->ignorableWhitespace = soap_ignorableWhitespace;
ctxt->sax->comment = soap_Comment;
ctxt->sax->warning = NULL;