Xml/Security.php

Show: PublicProtectedPrivateinherited
Table of Contents
Zend Framework
LICENSE This source file is subject to the new BSD license that is bundled with this package in the file LICENSE.txt. It is also available through the world-wide-web at this URL: http://framework.zend.com/license/new-bsd If you did not receive a copy of the license and are unable to obtain it through the world-wide-web, please send an email to [email protected] so we can send you a copy immediately.
Category
Zend  
Copyright
Copyright (c) 2005-2014 Zend Technologies USA Inc. (http://www.zend.com)  
License
New BSD License  
Package
Zend_Xml  
Version
$Id$  

\Zend_Xml_Security

Package: Zend_Xml_SecurityScan
Category
Zend  
Copyright
Copyright (c) 2005-2014 Zend Technologies USA Inc. (http://www.zend.com)  
License
New BSD License  

Constants

>VConstant  ENTITY_DETECT = 'Detected use of ENTITY in XML, disabled to prevent XXE/XEE attacks'

Methods

methodprotectedheuristicScan(string $xml) : void
static

Heuristic scan to detect entity in XML

Parameters
NameTypeDescription
$xmlstring
Throws
ExceptionDescription
\Zend_Xml_Exception
methodpublicisPhpFpm() : boolean
static

Return true if PHP is running with PHP-FPM

Returns
TypeDescription
boolean
methodpublicloadXmlErrorHandler(integer $errno, string $errstr, string $errfile, integer $errline) : bool
static

Parameters
NameTypeDescription
$errnointeger
$errstrstring
$errfilestring
$errlineinteger
Returns
TypeDescription
bool
methodpublicscan(string $xml, \DomDocument $dom = null) : \SimpleXMLElement | \DomDocument | boolean
static

Scan XML string for potential XXE and XEE attacks

Parameters
NameTypeDescription
$xmlstring
$dom\DomDocument
Returns
TypeDescription
\SimpleXMLElement | \DomDocument | boolean
Throws
ExceptionDescription
\Zend_Xml_Exception
methodpublicscanFile(string $file, \DOMDocument $dom = null) : \SimpleXMLElement | \DomDocument
static

Scan XML file for potential XXE/XEE attacks

Parameters
NameTypeDescription
$filestring
$dom\DOMDocument
Returns
TypeDescription
\SimpleXMLElement | \DomDocument
Throws
ExceptionDescription
\Zend_Xml_Exception
Documentation was generated by phpDocumentor 2.2.0 .