From 6c8884b2eba9473e9859378cb640fd40cdc81911 Mon Sep 17 00:00:00 2001
From: Mark Baker <mark@lange.demon.co.uk>
Date: Fri, 21 Feb 2014 10:28:17 +0000
Subject: [PATCH] Hopefully final tweak for XXE to prevent displaying errors if
 SimpleXML isn't available

---
 Classes/PHPExcel/Settings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Classes/PHPExcel/Settings.php b/Classes/PHPExcel/Settings.php
index cde7b6e..839231b 100644
--- a/Classes/PHPExcel/Settings.php
+++ b/Classes/PHPExcel/Settings.php
@@ -378,10 +378,10 @@ class PHPExcel_Settings
      */
     public static function getLibXmlLoaderOptions()
     {
-        libxml_disable_entity_loader(true);
         if (is_null(self::$_libXmlLoaderOptions)) {
             self::setLibXmlLoaderOptions(LIBXML_DTDLOAD | LIBXML_DTDATTR);
         }
+        @libxml_disable_entity_loader($options == (LIBXML_DTDLOAD | LIBXML_DTDATTR));
         return self::$_libXmlLoaderOptions;
     } // function getLibXmlLoaderOptions
 }