PR: Bump libxml version, deprecate libxml_disable_entity_loader()
| From: | Dik Takken | Date: | Thu, 16 Jul 2020 15:48:28 +0000 |
| Subject: | PR: Bump libxml version, deprecate libxml_disable_entity_loader() | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-111052@lists.php.net to get a copy of this message | ||
Hi internals,
I prepared a PR which aims to properly fix a long standing problem
related to secure XML processing in PHP.
In short, it bumps the minimum required version of libxml and it
deprecates the libxml_disable_entity_loader() function.
You can find the details in the PR:
https://github.com/php/php-src/pull/5867
Please have a look.
Thanks,
Dik Takken