Disable external loading on DOM and Soap components use of DOMDocument

zendframework · Aug 1, 2012 · 1b246ad · 1b246ad
commit 1b246ad
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Query.php b/src/Query.php
@@ -233,6 +233,7 @@ public function queryXpath($xpathQuery, $query = null)
 
         $encoding = $this->getEncoding();
         libxml_use_internal_errors(true);
+        libxml_disable_entity_loader(true);
         if (null === $encoding) {
             $domDoc = new DOMDocument('1.0');
         } else {
@@ -255,6 +256,7 @@ public function queryXpath($xpathQuery, $query = null)
             $this->documentErrors = $errors;
             libxml_clear_errors();
         }
+        libxml_disable_entity_loader(false);
         libxml_use_internal_errors(false);
 
         if (!$success) {