Change Details

I think we have appropriate limits on all of our xml processing, but since both Wordpress and Drupal patched for this, we should probably check. http://www.breaksec.com/?p=6362 https://wordpress.org/news/2014/08/wordpress-3-9-2/ -------------------------- **Version**: unspecified **Severity**: normal

When xml_parse is used to process xml, and the data is buffered (like we do in XmlTypeCheck and XMPReader), it can exhaust memory up to php's configured memory_limit. -------------------------- **Version**: unspecified **Severity**: normal

I think we have appropriate limits on all of our xmlWhen xml_parse is used to processing xml, but since both Wordpress and Drupal patched for thisand the data is buffered (like we do in XmlTypeCheck and XMPReader), we should probably check. http://www.breaksec.com/?p=6362 https://wordpress.org/news/2014/08/wordpress-3-9-2/it can exhaust memory up to php's configured memory_limit. -------------------------- **Version**: unspecified **Severity**: normal