Mahara

  1. Bug #1047111
  2. Comment #10

Comment 10 for bug 1047111

Revision history for this message
Mahara Bot (dev-mahara) wrote : A change has been merged

Reviewed: https://reviews.mahara.org/1790
Committed: http://gitorious.org/mahara/mahara/commit/353870b01a0ba0d6c94c8f7c4e30cabf5627d95f
Submitter: Melissa Draper (<email address hidden>)
Branch: 1.4_STABLE

commit 353870b01a0ba0d6c94c8f7c4e30cabf5627d95f
Author: Hugh Davenport <email address hidden>
Date: Tue Oct 16 13:25:56 2012 +1300

    Fix Leap2A import from Moodle

    Related to bug #1047111

    That bug fixed the XXE attack by setting the following to true
     libxml_disable_entity_loader

    This caused issues with the leap2a importer used by mnet, which
    used the simplexml_load to load the xml which relies on file
    based remote entities. For this situation, a the following flag
    is used, which stops network based XXE attacks
     LIBXML_NONET

    Change-Id: I3d95ebc9c38374d339d66a80feaa39f5c15f1022
    Signed-off-by: Hugh Davenport <email address hidden>