Skip to content

Commit

Permalink
Fix XXE in parsing SAML messages
Browse files Browse the repository at this point in the history
Implement recommended fix from https://simplesamlphp.org/security/202412-01
  • Loading branch information
dasistwas authored Dec 13, 2024
1 parent 085062a commit f521ffd
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ public static function fromString(string $xml) : DOMDocument
libxml_clear_errors();

$domDocument = self::create();
$options = LIBXML_DTDLOAD | LIBXML_DTDATTR | LIBXML_NONET | LIBXML_PARSEHUGE;
$options = LIBXML_NONET | LIBXML_PARSEHUGE;
if (defined('LIBXML_COMPACT')) {
$options |= LIBXML_COMPACT;
}
Expand Down

0 comments on commit f521ffd

Please sign in to comment.