diff options
| author | Vincent Petry <pvince81@owncloud.com> | 2014-03-10 20:49:47 +0400 |
|---|---|---|
| committer | Vincent Petry <pvince81@owncloud.com> | 2014-03-10 20:51:13 +0400 |
| commit | f4f61f03c9d14eaa16a7a7fcd49f2086dfa56e92 (patch) | |
| tree | e25548f8e6e1d047a17e245982ff0c074df9d76b /lib/private/ocsclient.php | |
| parent | 23eeb898a97933ebb61b5e325c8ab99a2e3c1596 (diff) | |
Disable XML entities when parsing XML
Diffstat (limited to 'lib/private/ocsclient.php')
| -rw-r--r-- | lib/private/ocsclient.php | 16 |
1 files changed, 12 insertions, 4 deletions
diff --git a/lib/private/ocsclient.php b/lib/private/ocsclient.php index fa6e3fac1bb..68dc2c2d6ec 100644 --- a/lib/private/ocsclient.php +++ b/lib/private/ocsclient.php @@ -72,7 +72,9 @@ class OC_OCSClient{ if($xml==false) { return null; } - $data=simplexml_load_string($xml); + $loadEntities = libxml_disable_entity_loader(true); + $data = simplexml_load_string($xml); + libxml_disable_entity_loader($loadEntities); $tmp=$data->data; $cats=array(); @@ -117,7 +119,9 @@ class OC_OCSClient{ if($xml==false) { return null; } - $data=simplexml_load_string($xml); + $loadEntities = libxml_disable_entity_loader(true); + $data = simplexml_load_string($xml); + libxml_disable_entity_loader($loadEntities); $tmp=$data->data->content; for($i = 0; $i < count($tmp); $i++) { @@ -159,7 +163,9 @@ class OC_OCSClient{ OC_Log::write('core', 'Unable to parse OCS content', OC_Log::FATAL); return null; } - $data=simplexml_load_string($xml); + $loadEntities = libxml_disable_entity_loader(true); + $data = simplexml_load_string($xml); + libxml_disable_entity_loader($loadEntities); $tmp=$data->data->content; $app=array(); @@ -200,7 +206,9 @@ class OC_OCSClient{ OC_Log::write('core', 'Unable to parse OCS content', OC_Log::FATAL); return null; } - $data=simplexml_load_string($xml); + $loadEntities = libxml_disable_entity_loader(true); + $data = simplexml_load_string($xml); + libxml_disable_entity_loader($loadEntities); $tmp=$data->data->content; $app=array(); |