Changes to the xml security scanner to use libxml_disable_entity_loader() when cleanly supported and thread-safe, and to handle UTF-7 charset which otherwise permits an XXE exploit |
||
|---|---|---|
| .. | ||
| data | ||
| PhpSpreadsheetTests | ||
| bootstrap.php | ||
Changes to the xml security scanner to use libxml_disable_entity_loader() when cleanly supported and thread-safe, and to handle UTF-7 charset which otherwise permits an XXE exploit |
||
|---|---|---|
| .. | ||
| data | ||
| PhpSpreadsheetTests | ||
| bootstrap.php | ||