Changes to the xml security scanner to use libxml_disable_entity_loader() when cleanly supported and thread-safe, and to handle UTF-7 charset which otherwise permits an XXE exploit |
||
|---|---|---|
| .. | ||
| CSV | ||
| HTML | ||
| Ods | ||
| XLS | ||
| XLSX | ||
| Xml | ||
Changes to the xml security scanner to use libxml_disable_entity_loader() when cleanly supported and thread-safe, and to handle UTF-7 charset which otherwise permits an XXE exploit |
||
|---|---|---|
| .. | ||
| CSV | ||
| HTML | ||
| Ods | ||
| XLS | ||
| XLSX | ||
| Xml | ||