diff options
author | David Rothstein <drothstein@gmail.com> | 2014-08-06 13:15:28 -0400 |
---|---|---|
committer | David Rothstein <drothstein@gmail.com> | 2014-08-06 13:15:28 -0400 |
commit | b6d84a81aa5ab264076cfccc789915fe98113798 (patch) | |
tree | 07887ed7ddbaff3ad44f1fee8e0e7d8df173496b /modules/openid/openid.inc | |
parent | 7ca0dfe310ed4f7e5cfc86eb554245b0434ed704 (diff) | |
parent | 90e884ad0f7f2cf269d953f7d70966de9fd821ff (diff) | |
download | brdo-b6d84a81aa5ab264076cfccc789915fe98113798.tar.gz brdo-b6d84a81aa5ab264076cfccc789915fe98113798.tar.bz2 |
Merge tag '7.31' into 7.x
7.31 release
Conflicts:
CHANGELOG.txt
includes/bootstrap.inc
Diffstat (limited to 'modules/openid/openid.inc')
-rw-r--r-- | modules/openid/openid.inc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/modules/openid/openid.inc b/modules/openid/openid.inc index d7ef663b4..a1da1d0b5 100644 --- a/modules/openid/openid.inc +++ b/modules/openid/openid.inc @@ -158,6 +158,11 @@ function _openid_xrds_parse($raw_xml) { return array(); } + // Also stop parsing if there is an unreasonably large number of tags. + if ($dom->getElementsByTagName('*')->length > variable_get('openid_xrds_maximum_tag_count', 30000)) { + return array(); + } + // Parse the DOM document for the information we need. if ($xml = simplexml_import_dom($dom)) { foreach ($xml->children(OPENID_NS_XRD)->XRD as $xrd) { |