libxml_disable_entity_loader() just in case...

Change-Id: I5c6394f811f9cd14dc549d005b4583d7575e85aa

diff --git a/includes/HtmlFormatter.php b/includes/HtmlFormatter.php
index 99426ec..d13e0a0 100644 (file)
--- a/includes/HtmlFormatter.php
+++ b/includes/HtmlFormatter.php
@@ -73,9 +73,11 @@ class HtmlFormatter {
                        $html = str_replace( ' <', '&#32;<', $html );
 
                        libxml_use_internal_errors( true );
+                       $loader = libxml_disable_entity_loader();
                        $this->doc = new DOMDocument();
                        $this->doc->strictErrorChecking = false;
                        $this->doc->loadHTML( $html );
+                       libxml_disable_entity_loader( $loader );
                        libxml_use_internal_errors( false );
                        $this->doc->encoding = 'UTF-8';
                }