php-doc-en/reference
Juliette f3b5475eeb
PHP 8.0 migration/deprecated: expand on libxml_disable_entity_loader() (#528)
The current text in the migration guide about the deprecation of `libxml_disable_entity_loader()` is misleading and can easily lead to the introduction of XXE vulnerable code.

In select circumstances, when `LIBXML_NOENT` is used, code can still be vulnerable to XXE attacks, even on PHP 8.0.
So I'm proposing to add an appropriate warning and mention the upgrade path in the migration guide.

Includes fixing a typo on the `libxml_disable_entity_loader()` page.

Co-authored-by: jrfnl <jrfnl@users.noreply.github.com>
2021-04-16 10:44:07 +02:00
..
apache Remove obsolete apache_reset_timeout() docs 2021-01-25 19:13:33 +01:00
apcu Fix #77771: empty description of APCu in its introduction 2021-02-11 12:07:19 +01:00
array Fix #73938: PHP7 foreach internal array pointer 2021-03-31 16:09:52 +02:00
bc xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
bzip2 Added PHP 8 into versions.xml for bzip2 based on stubs. 2021-01-24 11:45:55 +01:00
calendar Added PHP 8 into versions.xml for calendar based on stubs. 2021-01-24 15:42:20 +01:00
classkit
classobj Added PHP 8 into versions.xml for classobj based on stubs. 2021-01-24 15:58:28 +01:00
cmark Use canonical type names 2020-11-02 15:39:04 +00:00
com xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
componere
csprng Added PHP 8 into versions.xml for csprng based on stubs. 2021-01-24 15:54:02 +01:00
ctype Added PHP 8 into versions.xml for ctype based on stubs. 2021-01-18 13:07:33 +01:00
cubrid Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
curl Fix #72189: Missing CURL_VERSION_HTTP2 from constants list 2021-03-15 19:13:06 +01:00
datetime Fix #74982: strftime %P not working on Alpine Linux 2021-04-12 14:12:41 +02:00
dba xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
dbase Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
dbplus Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
dio Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
dir Fix #80712: getcwd(): return type includes false 2021-02-05 13:22:48 +01:00
dom fix miscapitalization 2021-03-31 08:12:51 -05:00
ds Use canonical type names 2020-11-02 15:39:04 +00:00
eio Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
enchant Document enchant installation on Windows 2021-04-06 16:40:17 +02:00
errorfunc Cleanup and update docs related to @ operator 2021-02-18 16:31:56 +00:00
ev Use canonical type names 2020-11-02 15:39:04 +00:00
event Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
exec escapeshellcmd: add warning about spaces in paths on Windows (#511) 2021-04-05 18:39:54 +02:00
exif xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
expect xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
fann Fix #73721: possible error 2021-02-15 15:01:00 +01:00
fbsql Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
fdf Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
ffi Generate methodsynopses based on recently updated stubs 2021-01-18 23:31:36 +01:00
fileinfo Added PHP 8 into versions.xml for fileinfo based on stubs. 2021-01-18 13:31:45 +01:00
filepro Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
filesystem Remove or rewrite examples using implode("", file(...)) (#523) 2021-04-12 22:33:56 +02:00
filter xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
fpm Added PHP 8 into versions.xml for fpm based on stubs. 2021-01-25 19:09:39 +01:00
ftp Fix #47091: ftp_mdtm adjusts for local timezone 2021-02-19 16:40:46 +01:00
funchand Added PHP 8 into versions.xml for funchand based on stubs. 2021-01-26 18:59:01 +01:00
gearman Fix misspelling in Gearman Job 2021-02-16 05:59:21 +09:00
gender Fix return types 2020-11-02 15:52:35 +00:00
geoip xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
gettext Gettext maintains some info per process, not per thread 2021-02-08 10:26:46 +01:00
gmagick Mark static imagick methods as such 2020-12-04 14:02:44 +00:00
gmp Added PHP 8 into versions.xml for gmp based on stubs. 2021-01-26 18:24:19 +01:00
gnupg Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
hash Added PHP 8 into versions.xml for hash based on stubs. 2021-01-24 12:22:38 +01:00
hrtime Use canonical type names 2020-11-02 15:39:04 +00:00
ibase PECL/ibase is unmaintained 2021-03-31 15:16:48 +02:00
ibm_db2 Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
iconv iconv_mime_decode_headers() doesn't treat headers case-insensitively 2021-03-03 14:34:53 +01:00
image Actually document bool return for imageinterlace() 2021-03-17 16:33:47 +00:00
imagick Fix #76203: roundCorners method no longer exists 2021-03-16 14:33:38 +01:00
imap fix parameter 2021-03-23 15:25:10 +01:00
info Update methodsynopsis: getenv() may return false 2021-02-17 12:17:17 +01:00
ingres-ii Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
inotify Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
intl Document and cross-reference mb_chr() and mb_ord() (#524) 2021-04-13 14:49:11 +02:00
json Update json-encode.xml 2021-02-18 17:14:34 +00:00
ldap xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
libxml PHP 8.0 migration/deprecated: expand on libxml_disable_entity_loader() (#528) 2021-04-16 10:44:07 +02:00
lua
luasandbox Update for LuaSandbox 4.0.0 2021-03-08 11:25:24 +01:00
lzf Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
mail Added PHP 8 into versions.xml for mail based on stubs. 2021-01-26 18:30:45 +01:00
mailparse Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
math Added PHP 8 into versions.xml for math based on stubs. 2021-01-17 12:21:53 +01:00
mbstring Expand documentation for mb_detect_encoding (#527) 2021-04-14 14:05:39 +02:00
mcrypt xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
memcache xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
memcached Fix #74284: Update runtime configuration page for memcached 2021-01-09 13:41:38 +01:00
memtrack Use canonical type names 2020-11-02 15:39:04 +00:00
mhash Added PHP 8 into versions.xml for mhash based on stubs. 2021-01-24 17:23:19 +01:00
misc Fix #74479: usleep with large numbers 2021-03-03 14:40:16 +01:00
mongo Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
mongodb MongoDB: Document versioned API functionality 2021-03-31 08:12:45 +02:00
mqseries
mysql Added table ids as needed by the docs at mysql.com 2021-01-27 11:47:40 -08:00
mysql_xdevapi Added table ids as needed by the docs at mysql.com 2021-01-27 11:47:40 -08:00
mysqli Fix typo with <methodname> 2021-04-15 18:34:33 +01:00
mysqlinfo Added informaltable ids as needed by the docs at mysql.com 2021-01-22 14:46:42 -08:00
mysqlnd xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
mysqlnd_memcache Added table ids as needed by the docs at mysql.com 2021-01-27 11:47:40 -08:00
mysqlnd_ms Remove PHP 5 info from mysqli, PDO_MySQL and mysqlnd 2021-01-10 12:47:52 +01:00
mysqlnd_mux Use canonical type names 2020-11-02 15:39:04 +00:00
mysqlnd_qc Use canonical type names 2020-11-02 15:39:04 +00:00
mysqlnd_uh Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
ncurses Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
network define_syslog_variables() and related INI is removed as of PHP 5.4.0 2021-01-25 19:28:24 +01:00
oauth Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
oci8 xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
opcache Document opcache.cache_id for IIS app pools 2021-03-02 12:44:37 +01:00
openal Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
openssl Fix typo: shorted -> shorter 2021-03-25 18:32:03 +01:00
outcontrol add ob_implicit_flush.flag-param change log for php 8.0 2021-02-26 03:26:46 +00:00
paradox Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
parallel
parle Use canonical type names 2020-11-02 15:39:04 +00:00
password Added PHP 8 into versions.xml for password based on stubs. 2021-01-24 17:18:16 +01:00
pcntl Added PHP 8 into versions.xml for pcntl based on stubs. 2021-01-17 16:00:30 +01:00
pcre Fix #80652: Leading whitespace in a regex is ignored 2021-03-16 17:37:54 +01:00
pdo Remove try-catch from PDO examples 2021-03-08 17:03:42 +01:00
pdo_cubrid
pdo_dblib
pdo_firebird Use canonical type names 2020-11-02 15:39:04 +00:00
pdo_ibm
pdo_informix
pdo_mysql Remove PHP 5 info from mysqli, PDO_MySQL and mysqlnd 2021-01-10 12:47:52 +01:00
pdo_oci Use canonical type names 2020-11-02 15:39:04 +00:00
pdo_odbc Clarify that encoding conversion may be done by the driver 2021-03-18 14:30:28 +01:00
pdo_pgsql Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
pdo_sqlite
pdo_sqlsrv Use canonical type names 2020-11-02 15:39:04 +00:00
pgsql xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
phar xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
phpdbg Added PHP 8 into versions.xml for phpdbg based on stubs. 2021-01-26 18:33:22 +01:00
pht
posix Added PHP 8 into versions.xml for posix based on stubs. 2021-01-20 01:09:17 +01:00
proctitle
ps Fix double full stop in several places. 2020-12-29 17:43:02 +00:00
pspell Added PHP 8 into versions.xml for pspell based on stubs. 2021-01-26 18:17:55 +01:00
pthreads Document that pthreads is dead 2021-02-03 14:09:51 +01:00
quickhash Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
radius Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
rar Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
readline xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
recode Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
reflection changed deprecation function warning as of PHP 8.0.0. 2021-02-10 03:59:29 +09:00
regex Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
rpminfo rpminfo: new constant 2021-01-21 17:31:16 +01:00
rrd Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
runkit7 Fix runkit7 functions arg type 2021-03-22 18:34:05 +01:00
scoutapm
seaslog Use canonical type names 2020-11-02 15:39:04 +00:00
sem xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
session Remove obsolete PHP 5 related info from ini.core and related pages 2021-02-24 14:32:08 +01:00
shmop Added PHP 8 into versions.xml for shmop based on stubs. 2021-01-26 18:25:40 +01:00
simplexml SimpleXMLElement::attributes() may return NULL 2021-03-08 11:22:03 +01:00
snmp Added PHP 8 into versions.xml for snmp based on stubs. 2021-01-24 17:27:43 +01:00
soap xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
sockets Add constants SCM_RIGHTS, SCM_CREDENTIALS 2021-02-18 17:12:39 +00:00
sodium Added PHP 8 into versions.xml for sodium based on stubs. 2021-01-28 19:03:52 +01:00
solr Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
sphinx Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
spl Fix #80795: Incorrect arguments signature for LimitIterator 2021-02-24 15:55:49 +01:00
sqlite3 Added PHP 8 into versions.xml for sqlite3 based on stubs. 2021-01-18 13:12:26 +01:00
sqlsrv Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
ssdeep Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
ssh2 Document ssh2_send_eof 2021-03-16 17:27:15 +01:00
stats Remove autogenerated file 2020-12-11 20:18:33 +00:00
stomp Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
stream Clarify meaning of stream_get_line() parameters 2021-04-01 17:33:28 +02:00
strings Document and cross-reference mb_chr() and mb_ord() (#524) 2021-04-13 14:49:11 +02:00
suhosin Fix return types 2020-11-02 15:52:35 +00:00
svm Use canonical type names 2020-11-02 15:39:04 +00:00
svn Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
swoole Update Swoole\Process::name (#525) 2021-04-13 11:21:45 +02:00
sync
taint Use canonical type names 2020-11-02 15:39:04 +00:00
tcpwrap
tidy xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
tokenizer Added PHP 8 into versions.xml for tokenizer based on stubs. 2021-01-24 17:24:24 +01:00
tokyo_tyrant Use canonical type names 2020-11-02 15:39:04 +00:00
trader Use canonical type names 2020-11-02 15:39:04 +00:00
ui Use canonical type names 2020-11-02 15:39:04 +00:00
uodbc xi:include INI settings documented elsewhere in ini.list 2021-02-24 17:58:20 +01:00
uopz typofix in uopz_flags() example 2020-12-30 14:50:24 +00:00
url Update argument names of http_build_query() 2021-02-17 12:22:28 +01:00
v8js Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
var Added empty string case to is_numeric code example doc 2021-03-30 12:36:25 +02:00
varnish Use canonical type names 2020-11-02 15:39:04 +00:00
wddx Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
win32service Typos and extra indentation 2020-12-03 10:49:51 +00:00
wincache Fix return types 2020-11-02 15:52:35 +00:00
wkhtmltox
xattr Revert revision 351727 from phpdoc/en/trunk: 2020-11-28 17:58:32 +00:00
xdiff Revert revision(s) 351724 from phpdoc/en/trunk: 2020-11-28 18:05:44 +00:00
xhprof Use canonical type names 2020-11-02 15:39:04 +00:00
xlswriter
xml Remove or rewrite examples using implode("", file(...)) (#523) 2021-04-12 22:33:56 +02:00
xmldiff
xmlreader Remove entry for "not yet implemented" method 2021-01-24 11:42:19 +01:00
xmlrpc
xmlwriter Added PHP 8 into versions.xml for xmlwriter based on stubs. 2021-01-24 11:43:39 +01:00
xsl xsl.security_prefs is removed as of PHP 7.0.0 2021-02-24 18:15:43 +01:00
yac Use canonical type names 2020-11-02 15:39:04 +00:00
yaconf Use canonical type names 2020-11-02 15:39:04 +00:00
yaf Fixed build 2021-01-25 14:17:00 +08:00
yaml Use canonical type names 2020-11-02 15:39:04 +00:00
yar Fix return types 2020-11-02 15:52:35 +00:00
yaz
zip Remove obsolete versions.xml entries 2021-01-17 15:39:59 +01:00
zlib Remove or rewrite examples using implode("", file(...)) (#523) 2021-04-12 22:33:56 +02:00
zmq Add missing visibility modifiers and versions for ZMQ 2021-01-25 19:06:50 +01:00
zookeeper Use canonical type names 2020-11-02 15:39:04 +00:00