Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:111278
MIME-Version: 1.0
References: <4378c303-f79d-219c-620b-45c6a45e2101@freedom.nl>
In-Reply-To: <4378c303-f79d-219c-620b-45c6a45e2101@freedom.nl>
Date: Fri, 31 Jul 2020 17:52:12 +0200
Message-ID: <CAEPJdu=unnszKm6QDgjgsgm_1f4T3RcyCLq2d21gfoHz-xRaHw@mail.gmail.com>
To: Dik Takken <d.h.j.takken@freedom.nl>
Cc: PHP Development <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="0000000000005983a705abbec657"
Subject: Re: [PHP-DEV] PR: Bump libxml version, deprecate libxml_disable_entity_loader()
From: kontakt@beberlei.de (Benjamin Eberlei)

--0000000000005983a705abbec657
Content-Type: text/plain; charset="UTF-8"

Hi Dik,

your e-mail has likely been going to spam for many subscribers of the
mailing list, I have just seen it after reading Nikitas comment on the PR.

https://github.com/php/php-src/pull/5867

I am all for this and wanted to bump the thread to the list so that
everyone can see this as well.

Are there objections from anyone from merging this on Monday?

greetings
Benjamin

On Thu, Jul 16, 2020 at 5:48 PM Dik Takken <d.h.j.takken@freedom.nl> wrote:

> Hi internals,
>
> I prepared a PR which aims to properly fix a long standing problem
> related to secure XML processing in PHP.
>
> In short, it bumps the minimum required version of libxml and it
> deprecates the libxml_disable_entity_loader() function.
>
> You can find the details in the PR:
>
> https://github.com/php/php-src/pull/5867
>
> Please have a look.
>
> Thanks,
>
> Dik Takken
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: https://www.php.net/unsub.php
>
>

--0000000000005983a705abbec657--