--- a/web/lib/Zend/Feed/Entry/Atom.php Thu May 07 15:10:09 2015 +0200
+++ b/web/lib/Zend/Feed/Entry/Atom.php Thu May 07 15:16:02 2015 +0200
@@ -15,9 +15,9 @@
*
* @category Zend
* @package Zend_Feed
- * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com)
+ * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com)
* @license http://framework.zend.com/license/new-bsd New BSD License
- * @version $Id: Atom.php 24593 2012-01-05 20:35:02Z matthew $
+ * @version $Id$
*/
@@ -26,13 +26,15 @@
*/
require_once 'Zend/Feed/Entry/Abstract.php';
+/** @see Zend_Xml_Security */
+require_once 'Zend/Xml/Security.php';
/**
* Concrete class for working with Atom entries.
*
* @category Zend
* @package Zend_Feed
- * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com)
+ * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com)
* @license http://framework.zend.com/license/new-bsd New BSD License
*/
class Zend_Feed_Entry_Atom extends Zend_Feed_Entry_Abstract
@@ -194,10 +196,10 @@
// Update internal properties using $client->responseBody;
@ini_set('track_errors', 1);
$newEntry = new DOMDocument;
- $status = @$newEntry->loadXML($response->getBody());
+ $newEntry = @Zend_Xml_Security::scan($response->getBody(), $newEntry);
@ini_restore('track_errors');
- if (!$status) {
+ if (!$newEntry) {
// prevent the class to generate an undefined variable notice (ZF-2590)
if (!isset($php_errormsg)) {
if (function_exists('xdebug_is_enabled')) {