mirror of
https://github.com/vrana/adminer.git
synced 2025-08-08 15:47:00 +02:00
SimpleDB: Disable XML entity loader
This commit is contained in:
@@ -1,6 +1,7 @@
|
||||
Adminer 4.15.0-dev:
|
||||
Don't allow path in HTTP servers
|
||||
Hide error message from HTTP servers
|
||||
HTTP drivers: Don't allow path in server name
|
||||
HTTP drivers: Hide connection error message
|
||||
SimpleDB: Disable XML entity loader
|
||||
|
||||
Adminer 4.14.0:
|
||||
Use autofocus HTML attribute
|
||||
|
@@ -436,6 +436,7 @@ if (isset($_GET["simpledb"])) {
|
||||
return false;
|
||||
}
|
||||
libxml_use_internal_errors(true);
|
||||
libxml_disable_entity_loader();
|
||||
$xml = simplexml_load_string($file);
|
||||
if (!$xml) {
|
||||
$error = libxml_get_last_error();
|
||||
|
Reference in New Issue
Block a user