mirror of
https://github.com/RSS-Bridge/rss-bridge.git
synced 2025-10-17 01:26:08 +02:00
[InvestorsObserverBridge] add LIBXML_NONET
to prevent XXE (#4724)
This commit is contained in:
@@ -19,7 +19,7 @@ class InvestorsObserverBridge extends BridgeAbstract
|
|||||||
throwServerException('Unable to retrieve sitemap');
|
throwServerException('Unable to retrieve sitemap');
|
||||||
}
|
}
|
||||||
|
|
||||||
$sitemap = simplexml_load_string($sitemapXml, null, LIBXML_NOCDATA);
|
$sitemap = simplexml_load_string($sitemapXml, null, LIBXML_NOCDATA | LIBXML_NONET);
|
||||||
|
|
||||||
if (!$sitemap) {
|
if (!$sitemap) {
|
||||||
throwServerException('Unable to parse sitemap');
|
throwServerException('Unable to parse sitemap');
|
||||||
|
Reference in New Issue
Block a user