eko54r
b5e3a778ce
All checks were successful
Build, Push and Deploy / build-and-push (push) Successful in 3m3s
Gitea Actions Demo / Explore-Gitea-Actions (push) Successful in 16s
Build, Push and Deploy / deploy-staging (push) Successful in 32s
Build, Push and Deploy / deploy-production (push) Has been skipped
Build, Push and Deploy / cleanup (push) Successful in 1s
60 lines
1.2 KiB
PHP
60 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace Safe;
|
|
|
|
use Safe\Exceptions\LibxmlException;
|
|
|
|
/**
|
|
* Changes the default external entity loader.
|
|
* This can be used to suppress the expansion of arbitrary external entities to avoid XXE attacks,
|
|
* even when LIBXML_NOENT has been set for the respective operation,
|
|
* and is usually preferable over calling libxml_disable_entity_loader.
|
|
*
|
|
* @param callable $resolver_function A callable with the following signature:
|
|
*
|
|
* resourcestringnullresolver
|
|
* stringpublic_id
|
|
* stringsystem_id
|
|
* arraycontext
|
|
*
|
|
*
|
|
*
|
|
* public_id
|
|
*
|
|
*
|
|
* The public ID.
|
|
*
|
|
*
|
|
*
|
|
*
|
|
* system_id
|
|
*
|
|
*
|
|
* The system ID.
|
|
*
|
|
*
|
|
*
|
|
*
|
|
* context
|
|
*
|
|
*
|
|
* An array with the four elements "directory", "intSubName",
|
|
* "extSubURI" and "extSubSystem".
|
|
*
|
|
*
|
|
*
|
|
*
|
|
* This callable should return a resource, a string from which a resource can be
|
|
* opened. If NULL is returned, the entity reference resolution will fail.
|
|
* @throws LibxmlException
|
|
*
|
|
*/
|
|
function libxml_set_external_entity_loader(callable $resolver_function): void
|
|
{
|
|
error_clear_last();
|
|
$safeResult = \libxml_set_external_entity_loader($resolver_function);
|
|
if ($safeResult === false) {
|
|
throw LibxmlException::createFromPhpError();
|
|
}
|
|
}
|