stable

Clone or download

Read-only

request #10859: Tuleap SOAP API does not work if you use a PHP 5.6 setup

Due to some changes made between PHP 5.3 and 5.6, the WSDL can be loaded when Tuleap starts to handle the request instead of during the SOAP server initialization if the WSDL cache is enabled. SOAP 1.2 disables the load of external entities in SOAP messages so even if we allow them to be able to process the WSDL when we handle the request it should be safe enoug regarding XXE. Change-Id: I1e6d049aacdc695bbf33a76de4ad3060613fa094

Modified Files

Name
M plugins/statistics/include/statisticsPlugin.class.php +3 −0 Go to diff View file
M plugins/tracker/www/soap/index.php +4 −1 Go to diff View file
M src/common/soap/TuleapSOAPServer.class.php +7 −2 Go to diff View file
M src/www/soap/index.php +5 −2 Go to diff View file
M src/www/soap/project/index.php +3 −0 Go to diff View file
M src/www/soap/svn/index.php +3 −0 Go to diff View file