[wp-trac] [WordPress Trac] #50898: PHP 8.0: only call libxml_disable_entity_loader() in PHP < 8
WordPress Trac
noreply at wordpress.org
Tue Nov 17 00:58:47 UTC 2020
#50898: PHP 8.0: only call libxml_disable_entity_loader() in PHP < 8
-------------------------------------------------+-------------------------
Reporter: jrf | Owner:
| SergeyBiryukov
Type: defect (bug) | Status: closed
Priority: normal | Milestone: 5.6
Component: Embeds | Version:
Severity: minor | Resolution: fixed
Keywords: has-patch php8 needs-dev-note | Focuses: coding-
commit | standards
-------------------------------------------------+-------------------------
Changes (by desrosj):
* status: reopened => closed
* resolution: => fixed
Comment:
In [changeset:"49621" 49621]:
{{{
#!CommitTicketReference repository="" revision="49621"
Code Modernization: Only call `libxml_disable_entity_loader()` in PHP < 8.
This function has been deprecated in PHP 8.0 because in libxml 2.9.0,
external entity loading is disabled by default, so this function is no
longer needed to protect against XXE attacks.
This change fixes an instance of `libxml_disable_entity_loader()` within
the getID3 library that has not yet been included in a tagged release for
the library.
Props jrf, hellofromtonya.
Fixes #50898.
}}}
--
Ticket URL: <https://core.trac.wordpress.org/ticket/50898#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list