Ticket #50898: 50898-getid3.2.diff

src/wp-includes/ID3/getid3.lib.php

@@ -720 +720 @@
          */
         public static function XML2array($XMLstring) {
                 if (function_exists('simplexml_load_string') && function_exists('libxml_disable_entity_loader')) {
-                        // http://websec.io/2012/08/27/Preventing-XEE-in-PHP.html
-                        // https://core.trac.wordpress.org/changeset/29378
-                        $loader = libxml_disable_entity_loader(true);
+                        if (PHP_VERSION_ID < 80000) {
+                                // http://websec.io/2012/08/27/Preventing-XEE-in-PHP.html
+                                // https://core.trac.wordpress.org/changeset/29378
+                                // This function has been deprecated in PHP 8.0 because in libxml 2.9.0, external entity loading is
+                                // disabled by default, so this function is no longer needed to protect against XXE attacks.
+                                $loader = libxml_disable_entity_loader(true);
+                        }
                         $XMLobject = simplexml_load_string($XMLstring, 'SimpleXMLElement', LIBXML_NOENT);
                         $return = self::SimpleXMLelement2array($XMLobject);
-                        libxml_disable_entity_loader($loader);
+                        if (PHP_VERSION_ID < 80000 && isset($loader)) {
+                                libxml_disable_entity_loader($loader);
+                        }
                         return $return;
                 }
                 return false;