diff -r 5a6b6e770365 -r 68c69c656a2c web/lib/Zend/Feed/Entry/Atom.php --- a/web/lib/Zend/Feed/Entry/Atom.php Thu May 07 15:10:09 2015 +0200 +++ b/web/lib/Zend/Feed/Entry/Atom.php Thu May 07 15:16:02 2015 +0200 @@ -15,9 +15,9 @@ * * @category Zend * @package Zend_Feed - * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com) + * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com) * @license http://framework.zend.com/license/new-bsd New BSD License - * @version $Id: Atom.php 24593 2012-01-05 20:35:02Z matthew $ + * @version $Id$ */ @@ -26,13 +26,15 @@ */ require_once 'Zend/Feed/Entry/Abstract.php'; +/** @see Zend_Xml_Security */ +require_once 'Zend/Xml/Security.php'; /** * Concrete class for working with Atom entries. * * @category Zend * @package Zend_Feed - * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com) + * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com) * @license http://framework.zend.com/license/new-bsd New BSD License */ class Zend_Feed_Entry_Atom extends Zend_Feed_Entry_Abstract @@ -194,10 +196,10 @@ // Update internal properties using $client->responseBody; @ini_set('track_errors', 1); $newEntry = new DOMDocument; - $status = @$newEntry->loadXML($response->getBody()); + $newEntry = @Zend_Xml_Security::scan($response->getBody(), $newEntry); @ini_restore('track_errors'); - if (!$status) { + if (!$newEntry) { // prevent the class to generate an undefined variable notice (ZF-2590) if (!isset($php_errormsg)) { if (function_exists('xdebug_is_enabled')) {