1
0
mirror of https://github.com/RSS-Bridge/rss-bridge.git synced 2025-10-15 16:54:28 +02:00

[InvestorsObserverBridge] add LIBXML_NONET to prevent XXE (#4724)

This commit is contained in:
tillcash
2025-09-13 17:35:27 +05:30
committed by GitHub
parent 3d0c41271a
commit 9662abd94d

View File

@@ -19,7 +19,7 @@ class InvestorsObserverBridge extends BridgeAbstract
throwServerException('Unable to retrieve sitemap');
}
$sitemap = simplexml_load_string($sitemapXml, null, LIBXML_NOCDATA);
$sitemap = simplexml_load_string($sitemapXml, null, LIBXML_NOCDATA | LIBXML_NONET);
if (!$sitemap) {
throwServerException('Unable to parse sitemap');