mirror of
https://github.com/getgrav/grav-plugin-admin.git
synced 2025-11-10 15:26:06 +01:00
988f4a0389
Adds a new notifications feature to the Admin plugin. It will now lookup notifications which are set up on getgrav.org and will inform users, and also alert for new updates and provide awareness on various topics. Also fixes issue with Array field in `value_only` mode, improperly displaying the key when novalue was set, and fixes issue with drag handlers in Array not showing/hiding properly (#950) Updated FontAwesome to 4.6.3
51 lines
1.7 KiB
Markdown
51 lines
1.7 KiB
Markdown
ZendXml
|
|
=======
|
|
|
|
An utility component for XML usage and best practices in PHP
|
|
|
|
Installation
|
|
------------
|
|
|
|
You can install using:
|
|
|
|
```
|
|
curl -s https://getcomposer.org/installer | php
|
|
php composer.phar install
|
|
```
|
|
|
|
Notice that this library doesn't have any external dependencies, the usage of composer is for autoloading and standard purpose.
|
|
|
|
|
|
ZendXml\Security
|
|
----------------
|
|
|
|
This is a security component to prevent [XML eXternal Entity](https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing) (XXE) and [XML Entity Expansion](http://projects.webappsec.org/w/page/13247002/XML%20Entity%20Expansion) (XEE) attacks on XML documents.
|
|
|
|
The XXE attack is prevented disabling the load of external entities in the libxml library used by PHP, using the function [libxml_disable_entity_loader](http://www.php.net/manual/en/function.libxml-disable-entity-loader.php).
|
|
|
|
The XEE attack is prevented looking inside the XML document for ENTITY usage. If the XML document uses ENTITY the library throw an Exception.
|
|
|
|
We have two static methods to scan and load XML document from a string (scan) and from a file (scanFile). You can decide to get a SimpleXMLElement or DOMDocument as result, using the following use cases:
|
|
|
|
```php
|
|
use ZendXml\Security as XmlSecurity;
|
|
|
|
$xml = <<<XML
|
|
<?xml version="1.0"?>
|
|
<results>
|
|
<result>test</result>
|
|
</results>
|
|
XML;
|
|
|
|
// SimpleXML use case
|
|
$simplexml = XmlSecurity::scan($xml);
|
|
printf ("SimpleXMLElement: %s\n", ($simplexml instanceof \SimpleXMLElement) ? 'yes' : 'no');
|
|
|
|
// DOMDocument use case
|
|
$dom = new \DOMDocument('1.0');
|
|
$dom = XmlSecurity::scan($xml, $dom);
|
|
printf ("DOMDocument: %s\n", ($dom instanceof \DOMDocument) ? 'yes' : 'no');
|
|
```
|
|
|
|
|