60 lines
1.2 KiB
PHP
60 lines
1.2 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace Safe;
|
||
|
|
|
||
|
|
use Safe\Exceptions\LibxmlException;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Changes the default external entity loader.
|
||
|
|
* This can be used to suppress the expansion of arbitrary external entities to avoid XXE attacks,
|
||
|
|
* even when LIBXML_NOENT has been set for the respective operation,
|
||
|
|
* and is usually preferable over calling libxml_disable_entity_loader.
|
||
|
|
*
|
||
|
|
* @param callable $resolver_function A callable with the following signature:
|
||
|
|
*
|
||
|
|
* resourcestringnullresolver
|
||
|
|
* stringpublic_id
|
||
|
|
* stringsystem_id
|
||
|
|
* arraycontext
|
||
|
|
*
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* public_id
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* The public ID.
|
||
|
|
*
|
||
|
|
*
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* system_id
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* The system ID.
|
||
|
|
*
|
||
|
|
*
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* context
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* An array with the four elements "directory", "intSubName",
|
||
|
|
* "extSubURI" and "extSubSystem".
|
||
|
|
*
|
||
|
|
*
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* This callable should return a resource, a string from which a resource can be
|
||
|
|
* opened. If NULL is returned, the entity reference resolution will fail.
|
||
|
|
* @throws LibxmlException
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
function libxml_set_external_entity_loader(callable $resolver_function): void
|
||
|
|
{
|
||
|
|
error_clear_last();
|
||
|
|
$safeResult = \libxml_set_external_entity_loader($resolver_function);
|
||
|
|
if ($safeResult === false) {
|
||
|
|
throw LibxmlException::createFromPhpError();
|
||
|
|
}
|
||
|
|
}
|