Saw this issue that was closed https://github.com/doctrine/doctrine2/issues/3788 With FosUserBundle, the user doctrine mapping does not load external entities yet still causing error with simplexml_load_file(). This maybe due to bug in PHP or in libxml. But as this error can be observed with latest version of PHP5.6 and PHP7.0 (at least on Windows), I think the workaround implemented by owncloud (referred to in https://github.com/doctrine/doctrine2/issues/3788) should also be implemented in doctrine. As mappings are not user input and not valid attack vector, then no issue with always setting libxml_disable_external_loader to false before simplexml_load_file() and restoring libxml_disable_external_loader afterwards.
-- You received this message because you are subscribed to the Google Groups "doctrine-user" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/doctrine-user. For more options, visit https://groups.google.com/d/optout.
