diff -r 5a6b6e770365 -r 68c69c656a2c web/lib/Zend/Service/WindowsAzure/Management/Client.php --- a/web/lib/Zend/Service/WindowsAzure/Management/Client.php Thu May 07 15:10:09 2015 +0200 +++ b/web/lib/Zend/Service/WindowsAzure/Management/Client.php Thu May 07 15:16:02 2015 +0200 @@ -15,7 +15,7 @@ * @category Zend * @package Zend_Service_WindowsAzure * @subpackage Management - * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com) + * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com) * @license http://framework.zend.com/license/new-bsd New BSD License * @version $Id$ */ @@ -75,11 +75,14 @@ */ require_once 'Zend/Service/WindowsAzure/Management/OperatingSystemFamilyInstance.php'; +/** @see Zend_Xml_Security */ +require_once 'Zend/Xml/Security.php'; + /** * @category Zend * @package Zend_Service_WindowsAzure * @subpackage Management - * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com) + * @copyright Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com) * @license http://framework.zend.com/license/new-bsd New BSD License */ class Zend_Service_WindowsAzure_Management_Client @@ -318,7 +321,7 @@ throw new Zend_Service_WindowsAzure_Exception('Response should not be null.'); } - $xml = @simplexml_load_string($response->getBody()); + $xml = Zend_Xml_Security::scan($response->getBody()); if ($xml !== false) { // Fetch all namespaces @@ -1428,7 +1431,7 @@ $configuration = preg_replace('/(<\?xml[^?]+?)utf-16/i', '$1utf-8', $configuration); //$configuration = '' . substr($configuration, strpos($configuration, '>') + 2); - $xml = simplexml_load_string($configuration); + $xml = Zend_Xml_Security::scan($configuration); // http://www.php.net/manual/en/simplexmlelement.xpath.php#97818 $namespaces = $xml->getDocNamespaces();