1
0
mirror of https://github.com/vrana/adminer.git synced 2025-08-08 15:47:00 +02:00

SimpleDB: Disable XML entity loader

This commit is contained in:
Jakub Vrana
2025-02-18 08:42:30 +01:00
parent d94e348f57
commit 2a3626faae
2 changed files with 4 additions and 2 deletions

View File

@@ -1,6 +1,7 @@
Adminer 4.15.0-dev:
Don't allow path in HTTP servers
Hide error message from HTTP servers
HTTP drivers: Don't allow path in server name
HTTP drivers: Hide connection error message
SimpleDB: Disable XML entity loader
Adminer 4.14.0:
Use autofocus HTML attribute

View File

@@ -436,6 +436,7 @@ if (isset($_GET["simpledb"])) {
return false;
}
libxml_use_internal_errors(true);
libxml_disable_entity_loader();
$xml = simplexml_load_string($file);
if (!$xml) {
$error = libxml_get_last_error();