mirror of
https://github.com/sigmasternchen/php-doc-en
synced 2025-03-24 12:58:56 +00:00
![]() The current text in the migration guide about the deprecation of `libxml_disable_entity_loader()` is misleading and can easily lead to the introduction of XXE vulnerable code. In select circumstances, when `LIBXML_NOENT` is used, code can still be vulnerable to XXE attacks, even on PHP 8.0. So I'm proposing to add an appropriate warning and mention the upgrade path in the migration guide. Includes fixing a typo on the `libxml_disable_entity_loader()` page. Co-authored-by: jrfnl <jrfnl@users.noreply.github.com> |
||
---|---|---|
.. | ||
libxml-clear-errors.xml | ||
libxml-disable-entity-loader.xml | ||
libxml-get-errors.xml | ||
libxml-get-last-error.xml | ||
libxml-set-external-entity-loader.xml | ||
libxml-set-streams-context.xml | ||
libxml-use-internal-errors.xml |