Merge pull request #7 from Currence-Online/v1.16.6

Removed LIBXML_NOENT tag
Betaalvereniging-Nederland · Jun 12, 2023 · d108560 · d108560
2 parents a825346 + b2d1026
commit d108560
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/CHANGELOG.txt b/CHANGELOG.txt
@@ -1,7 +1,10 @@
+v1.16.6 (June 2023)
+* COT-775: [PHP] Investigate XXE vulnerability in PHP library
+
 v1.16.5second (June 2019)
 * add missing cacert.pem file
 * COT-287: [PHP] eMandates library cannot parse maxAmount field
 * COT-310: [PHP] Remove vulnerability in PHP eMandates Library
 
 v1.16.4 (June 2018)
-* Add composer declaration
+* Add composer declaration
diff --git a/Library/CoreCommunicator.php b/Library/CoreCommunicator.php
@@ -309,7 +309,7 @@ protected function PerformRequest($docTree, $url) {
 			} else {
 				curl_close($ch);
 
-                $doc = @simplexml_load_string($data, 'SimpleXMLElement', LIBXML_NOENT);
+                $doc = @simplexml_load_string($data);
 				if (!$doc) {
 					$this->logger->Log("Raw Response : " . $data);
 					throw new CommunicatorException($data);