summaryrefslogtreecommitdiff
path: root/modules/openid/openid.inc
diff options
context:
space:
mode:
authorDavid Rothstein <drothstein@gmail.com>2014-08-06 13:15:28 -0400
committerDavid Rothstein <drothstein@gmail.com>2014-08-06 13:15:28 -0400
commitb6d84a81aa5ab264076cfccc789915fe98113798 (patch)
tree07887ed7ddbaff3ad44f1fee8e0e7d8df173496b /modules/openid/openid.inc
parent7ca0dfe310ed4f7e5cfc86eb554245b0434ed704 (diff)
parent90e884ad0f7f2cf269d953f7d70966de9fd821ff (diff)
downloadbrdo-b6d84a81aa5ab264076cfccc789915fe98113798.tar.gz
brdo-b6d84a81aa5ab264076cfccc789915fe98113798.tar.bz2
Merge tag '7.31' into 7.x
7.31 release Conflicts: CHANGELOG.txt includes/bootstrap.inc
Diffstat (limited to 'modules/openid/openid.inc')
-rw-r--r--modules/openid/openid.inc5
1 files changed, 5 insertions, 0 deletions
diff --git a/modules/openid/openid.inc b/modules/openid/openid.inc
index d7ef663b4..a1da1d0b5 100644
--- a/modules/openid/openid.inc
+++ b/modules/openid/openid.inc
@@ -158,6 +158,11 @@ function _openid_xrds_parse($raw_xml) {
return array();
}
+ // Also stop parsing if there is an unreasonably large number of tags.
+ if ($dom->getElementsByTagName('*')->length > variable_get('openid_xrds_maximum_tag_count', 30000)) {
+ return array();
+ }
+
// Parse the DOM document for the information we need.
if ($xml = simplexml_import_dom($dom)) {
foreach ($xml->children(OPENID_NS_XRD)->XRD as $xrd) {