...

...

@@ -95,7 +95,7 @@ function test(?A $a, $b) {} // Recommended

95

95

<para>

96

96

<function>libxml_disable_entity_loader</function> has been deprecated. As libxml 2.9.0 is now

97

97

required, external entity loading is guaranteed to be disabled by default, and this function is

98

-

no longer needed to protect against XXE attacks, unless the (still vulnerable).

98

+

no longer needed to protect against XXE attacks, unless the (still vulnerable)

99

99

<constant>LIBXML_NOENT</constant> is used.

100

100

In that case, it is recommended to refactor the code using

101

101

<function>libxml_set_external_entity_loader</function> to suppress loading of external entities.

102

102