From 16c1a19d34525dfeea2f7d35baf34ab6f463503c Mon Sep 17 00:00:00 2001 From: Mark Baker Date: Fri, 21 Feb 2014 10:21:04 +0000 Subject: [PATCH] Update security section in Reader documentation --- ...umentation - Reading Spreadsheet Files.doc | Bin 178688 -> 178176 bytes .../ReadingSpreadsheetFiles/02-Security.md | 13 +------------ 2 files changed, 1 insertion(+), 12 deletions(-) diff --git a/Documentation/PHPExcel User Documentation - Reading Spreadsheet Files.doc b/Documentation/PHPExcel User Documentation - Reading Spreadsheet Files.doc index c1dc2b55394d75f5779d83c48a5658ff3068ecda..a85a31689a5424f7b131d73e6b91bd67a4750db4 100644 GIT binary patch delta 21075 zcmeI)d0b8ToOSpIZ~B7FFkt6~$C{N4-XAcGfOj3LR?PM;%qn zHZLgpsBzknaz}28GKWb~SL5oA>lCG<$}*OpV;WUTQT||6-O|SO-%kU|D@r2!c~n7B zMzTqir=s{Vy|PwO__=b8sr>sF({g`VQIaJ)k`-k$zZ|epQMNH}MuZ%RvVHFR#SK4D zrh3UUa64rDy&|Xb$Wy&ctBq5$b>gF0F|8@W#)ZZcnPjdgh1qXG7CJXIuK9i{cQ@Kz zQA|fQ?dSV>d7?T0O#8`RCi+>I^)f~6-)$>@6G)uuEmD+xW+KA6iFWC7;|@%RCA$sz zeQMY8fls_n%A7O&nU?1YAi3B@^Cgr8(@LgCh@JyeFHW}-Q<=Z=Zz~emkT(fjJ@dyl-@i@UIrtOSde@&K{1j?i}zaihi?c{ z;&t=?WwVsp)}4xm^y%4UXx~1ay7e3w(WOshr^tSTdJY=asZVr7x5xpmgQ8sr4Hz8h z+C7?ZRHSQIa5K*?5d$N;xwedy8w_;qGR(DGWcP@{eFk~C+Su5LPvxCc_LQE{(XO&< zU}Tp8gChnEbFEUTvUf_m@eyi@W>VE+k-w6xo3RbMup4POg}b z#<{HfVIT%UVR@BeQGZ=-`*nM{t>WNl_N^$SyzX%VrtSLac!rC2wPQHTwUd+m3grr2XP%Ya0?Ec zsUzG_64l`YU(`WU1S148b-H2*euXKeWD2#yBF%FBlb*d!DG2>LRu$<`;geUB$6P-_}a8VD=;T z*`Ag@94oO3ovF_e=z`7_6=e;Q(4Xce1_O{;SyB9}@H=R#lB00;7M(Ab6&(&ZiS?JA zgzG^kF@2+r$XeqsRxnLBgl#lQ;`y2)8b$QoO&Vy+OAb<{u)L}4CuID$01!CRE&WXqujYN9?G zA_z?oR-uiev?Cx>r$0tRi*Z;1Q;K!Ukzz4~Gc(dp@6~7MK~;j+ZAzaZG^a$>>xbXS!tCDayJ7p0wXaB@mP#h9L9Y-fE8CZYm`HIG)54@ z&<=w!1VgbMJCKSaNXHdCz(c&ndo806@Fds0P#bm72tf!&2*S}3oghofAdJO0OvGxK zN>6ll>7l%SlPa2}(l^-pdahqOHjIcL5uU!a>M zhw-F|%{R#-%IibLRlTbitM?brH`LWumiv`8RiT#3+FCBV#yWY+TB|57r~ofiM-BL( z5rWVSk?4U$tj1<+K^l(XPh7-3JitSgt;VscX%)qrKy@@kAex{Vf}uq$reh}NV*wT+ z9&524$=HBHIEVANh%9`<+sAk0aQ^6C{a)iJY2nem45b;J&klbLu2L|7cS!p?&2OkLdNtH@({~>a700PK%T)H zn9ib8_E~gc8iRq=7>&RvjK*|iKD>G1;R4gw3Y z2F)-#Q)vFHsfH@2;n|QXz z%_043OE$q&S4E!PUB%el-r~tNZ*gc_nNX$bKz1a5Y?i%)YjtU`P@x`eF-Aj+SeW}O ziUoc^OU%M9+`=PN3?N(U)0m6vkBW#Bl(7zvoD5}c#|w{d=4IJ?_QFP7xa=*$-xUxY z4tj`wJ4a|8G5iTeWS5!o0G(!lQqdmG}00v?##$zIm;utRAA~Nt8@9-YhoMIm2 zMKc5=w62!^B7t7$jUgC@;Yh+-Y{yQd;s}o81TNz$OzHQEuu7Vl!3yPJN>h4L8K=LD z2%9=p#WTN#zbwqmShFmCz8q$VqI)NZpZAAr6(5;5qagD~=FLpZ#(eyW1xUmiq~b8r zVB<$YLlHQ`6BSV#zG#AG2!T5lL7ElfXc9Q4Lu_CzkbV{AGnDpap?%N&Kr{y)Wo)PmZ|vM7$k zDEy8^SdBGE!%>{WdB|e=7#}I7pYR#B4QPQ-7*23TIaEL+1fdCjL@2r=3cazVK{rL& zN?j>Fyl24X-{fR7 zCv2ViMjY8*x>W^Pzf2K-)QD?lV>*&>6U;ys=yo7Q46(EAN>)7VHkz67>|jVf|-befDXT4CDtPuTd)Ql3CsHptep&N!Za$XMEQ)45Mqggne%FSXy(eH?-2uAP=p}@UC|4DFbG323}Y|>lMshFScpZ4$4Vq&9kyaS_Tc~y;yBLW9O}x_ zlAd`~PULv6X>v4EpTw~6%UyZ)HioTCTW5+BY3`!K@wOuExVPArMsn7bd%cS5xQ~a( zz;nEWRa5d7`A`T&;DX}tLM2o|b<{vTgklJO!cfHGXH3R4%!a^1Eu(lW$4Vq&9X4Yd zw&N(y;vCX(88>hX8F+^0u%@BQ3tQO11;tPXW#NN5s0Tj;BD@i!AT-4U%))HQ6ia6? zq#WbZgj08>CVj1<#w|?i<(6{$FH<%a$I?oPQ73DPw3FWA;b}*01G(oo%!3Zgu^M`8 z!B%X;4(!A}?8hObA`Qo3YS(WOeun3G4JX=lQ(Hfk@HE6h;8igFXn6sUjlX3G>4h)# zP}aqr44V=Y7Rg}_^>57NVKF^A$SNp4pZZME@ix{#clpbFC;)r7p(N_T9}O@Yargx* zk%E&rg)=ydYj}u9c#NlbhL5mlPSHayMa66GmVpe#T@> z#a!qRk0n@&)mV=W*nwR*j5M6XAGm-kxCUxqx@?NmX}f5YSCHkhZDzdCSW0Ndjm@=j zg<;i~CFvsMyo;E6zK|Gu(OWDz?;!eJ$R&C+|Kya7usiLbwd@~tMW%UOd9auGfR8Za zf^C6Z$O9)7MKQR+9p%vy5$J-h=#BmujG-8YDVT~`5cmbZVp$8Wk}C+T!CItX6Lw%P z_TfA(A|01;7x(ZQACQGlF#mxF!wR_(g63$4aP&iejKnBR#f(r!vvC?{V5(r5H!@FW z8fu_ivh>ShW>_Ja#-~%0Qj-T28v zT){Qm!X4a2k(MMdJm3kQVk>?KKrF^!DyHLCEWipRVh!%&0iNJ3-s1zZVAYEBfSs06 zemJ8T%Af)~Q5gd;5Icm#B+6ZJ=D+9vu*Y@i6ryrxX4a3$PKJuowGq z9XIe08Bl+uV8a}>P#aJ16q$I9;oKgNz$i?^j8H$KL0~TCApvV~1n)8#cmTj7fb8MG zj^u>o-x=o3_<4B$;hh;NBKBHEVV3?;t5_C{GW1#VIz}z*(@inXl}aFL=kN|PdNNuv z3L_z-aTK3XHH_+j((SnHBOsg}D$;Qot7twG@fhz6$(KFKo)MjP)Dq2iItkmIHvfjd zD7wnVOeQ>iY%$|X4DSK#MA+GUTE#)0@U85q6e1c;5RB#!n1e-Fj1+9bUhKmuoP~^j zzP1!ZxWWyd@IoEVIFfIgs{*nh3I*nGp2azsngSRSbff)Rq25SW8sumsDn5u30d z2XG2!aSnf?7{#VI+))vgQ4g&Vjt+=KcMQT{OlZSs3Z`N@W8C48xt3cT(^C zK4;3D;f4``-{rt7t}3|-D*?jo))nD#qma0iYS+1vtnh_7MPJC%mZzIDx*xleG~FmE zksOu#oVrouGPYqmw)UiA^`c^79WwDw`SK^)?5JOD=a*Rm|8z!NURjkFp5F4Mr|`UE zBNm!livb43~@+?9$WAMGT|&qIBPhfAl%@NN~nXn2!MPf6NnKQ ziOHA=9Ts3AwqhG7GhTta*!#GU9bj-wj{DuT1Vl~#`C0^kz%)65&uz{_X zQ6UtD8%n_g<$B2kKj#|aO2GR3HUDQJeTA(-jA{r^! zg*`ZfbGVKhc#0Qz2{%s39iFI&+VF)R>Z1X=q8lR7UCT(OhYr7BIaVMUDbQmJ4&g9N z>2{TH1|H)%97!)zTFUONyu76v@7TCkOV!IDi<06QjB|3yy!700Q|0ip%x%l3QDW>< zZ_)3mjivD&x;XvNOW0>Ph|dpsgK4Zg7N)n z1~40Oma9hr@-;o5y#i ztYRR|J3o)p(pw+ZtQ1cJ9HU;_*QdAsJe)*k>AqY&lmJ-^>Yy`Zg35$k8N)3N@yZ!j z*PnO}jlSpy9roc4p5haV4O5gh$Z^pn4q-b&G!MCi77_Qkd`cHC+lYL$rEKRdSHY5`czijW%eH4(N!!h{hC5!wk&F0wiG_wqpm-dY~sV z@1%1}ZW^U$%7HnW^vvT&_8Erb+c&P?xMt;=Wxvicrk`-hjI%H_l_EZ~Nqwb; z%nQ>YIt(X`kcidThKnOOZv>2_`9K4V!$BOvd(r<>Rq^|6xIhRA3i8*ub zZ)UhY@zVHnXL0$Rla+kuVcvbbnE5$E+%;Dk~rgR-cMMre#CXofauhxWs@+#?W>i8BCNjKO%Uf+@kgNGLyqp(n25 z8B7Uh=BnbYhxenDiy(#INS|BHx=}5%XrcmIp7( zd%9%bEtxKRm1M>=M+?MY0Aeu~(=i(YbC80K*oOm<8F>_Ua2NOR2ruvwuaE_+Q9L5k zGO~dkoKOrUPzGM8h+3$NdhkOdG)54bqXj|{hPLR35g3IrSdIj&z)HNhV;IuqxE!Ms zdr#=^B+7+yQTm-1gpFevjQ?$}9A-}u1wI_L&BM1?>su&A9HV-VxW+e>AME{<>hg@` zS;{kW;{Y;ZO(7%G4ml6*I+_!N8zQiHv~in?Pm1@m&vpgO zsn6XEZLA^WAL1-x-u2ho$#X5vA><+D;XL7m=4gSA=#1WoMt{U$G-hHJen&i(Upgx+T9omD>1e6YtC)pW&&=9~q(c!&3}A4_V& z5d~2QE+__9lo+ejQ``u+qc(gIiZHZCIELUS%))HML0}H%j@9k5*0eX1nNT#B#>I>; z)OEhOG(8M~gj||-Uh;&OU@1&-H^oOD`rF;e^JPgz(fKQyt>*SMsqXlV@VdSBNx z%w@@9OQmBIOa0dC8dr@*(O7~iuJm{7tS}QPqh$M|0}y$o|CUiI%TV;8}mw2!|(yQ{JvR!>np!sm7i(K zulVGLaOQPr(d&`N{-k|F<5vput-E|xEMH;D_kZ&3lze$2Uj)d<(DL!8eEugN9?9n) z^0r;xF3KAr+1Hi*B6;bTR}R`RTk5>59x^{@v~)JBRFC}ZQfUEpOI@Ve>qcd23gu$2 zN=J0kjbbY;x5)}SR{A0u{SkwK7z7Tc3NMt}n6$mjm@(Ve_Emv!P#;~;~%6kW^WIs<1i6RumduC z58()o;x-hrm=83S;;4ywx~zAa1S>szR4kRftIia%S7f~8+&<d>a) z7p%l_+=l$3^&Kqga^*x(xWNOV7+shA-$y`xfm##+XokK>z(#CAA%C8>As$Px2gh&$ z7jXp-@CsSb1aMH;B0ro^1H&)|@mPt2T1Ll_f#(=npX9}M9L00U*4M59d5N;{fgb|V z6caENvk-@Qc+-&I!9I{PMgz=-{Os-wp5Y_3R*mSz!xjY)h$a|`pRp9HaRFD*p)vIx zQ!o|#a2}U&7oT7rM14mHX5%#OA`9|UF%JYFwh8&ahJgIIN`B|G3RfV%VX|*VvZFfW z_etlGjz@Tf^1)Oe%tZp6LO4@gf&6mD^rehLbDkYz6sBPw5^xKjnrk^o3ohyKLKU=z z{P1Hg7GW_=-+IXJJoe)hE+O9!q#9h|22WH(9Ry-JW?}(;M-tXy2M)qg+me6NEy3Covz|jf^&9 zKMvv)DDAI-tEGoeVJunDAL0;+h;}G0K z*#=cY$^YsE7KU*rg-^)SmXeOr=!Ibzhd9i^I&8#Nq_*QK59{`n7r3AWh9M4H@BtrT z8BP|X5&|&-3+3(KRsyLo>%esY!T1qv5Qc8ph{HI747|Wgyuw>}bfiF{H=-e+!&O|v zZ9IW%CsGxj@JEoAQAhMZFT`Upp5PgFcc!61?k*Hmv_%94A{Ohg9$S$Kr7K+lmSZLK*os4tFX|>jzJyzb1f=08OfTIE^dR3MU$m7)d3d4@ z>Y_1Ppe0(PGa}Fvvd=cLhn7~1fb4($g7H!09dw9CB9gHQyKod|aSb0ZsV6NQ#`mI^ zgBra#Fai*S@tA@HBqLuR+6zp;6s(nRZsc2^$~=o=!rh)i-GtPmj;sm&j`Fkz#y(tm=1wCIDmsVguA$h zM|g=W*bL^%2v?MVJIbIEYQYbU&=^5ziZHB1@gX$XL&$$m0u|955$KKnh`|7i#uBW+ zX6(fg$X5z~;2Pv>glBk;56FUiogi;)yip4s&>3^^D;6SNzHUgudOW~GWI(=3c!Rfi zhtIGaO52ULXoqlgKqquY7j%UV8*m00c!BrWJ&YvBd)N=Bdc!%8k$hMlik~nG0^C37 z*5*?S>9X>vg>}d6)NtLZ0%~5}&U~u1T-HKY(MfgCGdsjWSFxb#rXA-@iGjRx2r0_B zVL4=vzg)0B_jr)K$BcTkBy`A*H!${zMm08eU1~Nn_7pNgj6H+2 z=B6Hju|ps`0!?rZ@}tgDEsfXb-c0+zzqRqQID@IY%nfcsNs^bZylst_Ez@PkJ=}QN zFQ^vTWK*U6w!%`> zsaLX|#zWT2!=OHDmGcB-g)~*Xs?-_z%Fa~r1mU?b)wlbEWqmW%Gb`%IKdoPn*jCo7 zcaZhUVYrL2Le2hKe-talB3o5`Y!P)TPjP7yTA>Z5A)kh}2mLS|C-4{zRLV7$VLu$r zXh$#s%VB3usls$5!QX;3!D<|Zt0j#e24gPL@X(Sp+LnteVs6?Hl+VLX^3wT%#>Qx_ zEiI-Ur6ya;{L~|~DnRMLm2B}2WB~R#axw+E6l4o3LZ(7KR@jX+oWflL>WF-r^Ac@H zIGNZv6a4QQwNY%Fg3XYLFB>#h65b8v(H0R{jHOtPg2O3I$ZpRRGu?V;TD0BHG-3bc z$Wo)~;)|*!ba$Lpr~jX=|Fdj0W#zxjKE+%yGq7TsL+P9||30i+>#P>}+l(hy_2g

0OG+|@<8lHsbO&b6)Tq?;9>TIzl;sc!y$+4Nefx9(XGd#_Yq?fGS`rEa|^ zm(2FjYA$_rY1PWixMo(Q>a2_PR4sJdUb zN19maSa~wXwwz^UYr`7?CAy4G(?FePTuD6tKH9;$HMP~T-|nf1JW+4mnofURu|86+ zs7-v3>r$3|VWhJ6vBapZ$X4c~?_G`@1-NEl;+(2_dSj zetn=?RsG+@$xvi+nf+(w?Y}OonX0Z$kZP~%-i9RkQukbR-D|M$R4LVRUP;wQ_cWB; ziw>ecYO0fl()16DTEnk9{%LH~ApbPk^D-=#%Re=rampJiy3M++v1+g;x87=u>Z#H98>=?fR27MCD?D7& zyBAPA*z`4hs)+9N)Rj8Sab3%I=`Tw!=^uJHI;J}m@6gMW#!O@HKCBprFJqrJ3=>at=cD7zV-=*|9h{kZtz-F ztGTSpWMX-bBc0o%8@`T3dfoeV>TpefZt!~Mn&>jutI>^={Ywo$`~JV~<9A9sqaUtUC#e4q#-8~L delta 21486 zcmciK2Y3x>-}v!4lO~9kBBEvWE;`XW5fa3%MG#3OA(9B9?}=_%YZ;tng;-rgWR;`$ zvbtckh~C3uiPinTzf&Uid3K-oeXjTVXRgo8J#(hqbI;wT5dSoH{EOT_c$NE7rZDSwGwJ+*X=sR_iX-N!ex|sAKt1q z%hpYcRA=iavR$rHiZX{^ig}uUwog`+A5}$J$ntYcW6CPZd46hB&iwmdr#_VxWexjz zQAJV4uu4o-MQO%#(pp7fb7cxs`TIB1O8@dh8I~+cQIySW8SsmuY-2u&9k>!@=iK*8 znl@0hYH|jpPMWt@WGYA2s#$+FPm|Va?`%rwtr0daG@r;+TSeK!e%)AjteyFnzfNU$ zKRYXm^{CeU{B>SVH0PgnKbB?MNxO>GtWo>Bb!D42#OcXGMJZro=&aNE=({d8@4zc^OMp5!@ zkU2$hXv;-pD)X!4m##}CB5gWKL{3_MkQJ?e)`a+CnWFgTQk3;v`BMCNhN(MKYeGC^ zULx>;>0GW{=~A+${QY$*mso`g-cC-RFVhnzZ*OAf8_}=(ph(~7ppej5znGyB(NRMxRBY(v)ZBV3i6QYC5)&F6 z(SM|A_nd=gq-l%n7|JTdi8v1p4;pGZt>HmYLuK(W7Dhx385$ZCQq9TftMCXS>#w)O z&@(1BdT40y&>`kcB8G;0Mlcf++COMmy3`+AnAb$tf;f6mY-m*Zp`Ot(p;2-I z-MhEu1O^aGQioG;(wbK)y1}OG_r3Er@N6Cv8xiSQ)2l|U4T%$iR6}2i$_Cx!S|#+0 zCE&T4V1Z7Y= z$6Qeuf}v1qxrNs(5w5hTq-*I@Nb&QrQ#zwJf|zG@y=ncJ@LIKMDb}qTxSBTlPn-Um zE$f@N@$#wqcZclXE?$WVmts5kXl}+1AJ=?b!&Ga$yhynUIS=gTV@qUhiLCAC=cSEU zKBZIPMx@mUjKXLs$O-0FFPRY}zypn(7QMKU2 zpFU`bN$%S2O;rl_WA(#ieX_peW!I4Y)pOkywJQ85mqVq{3vVs5!= zgICwk_N{KD&0aP~+q1l!zN~AwMA)2@$T8N;WWHS1%<(rl%|p^LFGuZ;ui;jnG_OE| zSW!`m(B?W;A!f(}cN)tg2t|JsudXO1To{!^@fwN}fdM$Cb>3J`d$h5wu?g z%4<<;oU}4Y9)!*FO_EAfcPEjZTjn9TCDg`uG$9?KE=`*dQV0dRoVA3E)p}?hR}R&? zNGeI3Jy8o^!5V*ww>$BcxaZ0dcMrnFP!ILtjX?B91fnqsQ}Hc!U?-kKdOc-m&B~%{ zRhr!Z0+TTX8?gy@aSt!>5>GO3XWqV&c4*h3&Fhve_+deOT>oVYmdPaNuxvp|w{T8d zYqp`dwmi9st$j>*hPGtY3B6K5_M(u?D(v9^R}_X^hN@_YMrei*ST9X6xipq5Q;n$? z>Z1X?5s2QHh)GzE6*z!{xYwW2eb~{Pu!k!Oqb6#h4n|-kCSo#vL{_E@x2|23;l#dM z+t#mGxZ=CU$kf2isVb?$k~6%vPfO77?#AV&f1T*PFk-`HME{dCA1lv zV)cdOgula2NI(iwu@&3!D~{qA9Eo^tI3b^$1d5_6s-qzq!3VzR2tDF412ZunKVdNv zYv~nb9f9>og{00QoWpOpg!hmXb0?)F)pkNs?j9udE|7APf=}+Gn}=h2jeB#SHi8YuVxRd^5?J5UzdQGRZ?yQ|N zR<5Gtbq!C5458^6oi~w_w@h7J!>e`pz)~4YYb0%u)?mXdy;94XiQ9AR4j6`4XGip8O0h=@1Z2B!3*`_jfQO*`M?)ph`<00!*INM zeCP5R%W!m`F@<5-{G+qx&l)#;Q1Bq@h-|WM^HUPQO}o6eY?zYIEnHeFPSlnYwJrA@ zQA&kGTcT%;T5*mbQM=Wc;z8@?h27YLy;#_cB8LZfh=$F%+-QuwEwnz5{7qe*MR)1e z-1Q*rp)I;wK1bL?mHKr1H(J+Cu6o5)&S)~GVj5236fWZme#cY1!+Yc*Uipw8e(*;R z^ui!SVFX5F3{tQjJFy!_a15t#TF>YzZr~>5r2m8+Cu)z}s0M37>>@0QAqjCBS(((h z#!T~&9n20GGt*O&mdP;x`;^IJl+XUCdW&h>c6(~Ywsz5e-dbE6zO}OUXtSqwVDlH+ z&dm;brJ5Y#3@+meGVln$!?7u8fxK{sC#u5>P0<3aFcsfo4(4GM)?hP?IEY_y1dd$K z+;D-Lo>6&JKrPfoJq*A=jKC;N#AHmvbj-(3Scn9qVmJ2S0Pe$@dA!Lq(pIHeM}!X> z)3RjHZftSOy>?mRd>Ou9s}KXlj1T4mCBq0Usu?u^# z59e_kcklpCEy>Twj|T9@tEYFboVl{kG}^N2?iKT}&m6Q&WZBbY2{O!9r|7js#&X)j z-37D~yN`9LX+4;A#~s<}Xe44a9${N+>MQKP>h@d*yu=wF>MfkZ^iH(1F!z*ydP>{9 zy>@m_+54Wg*ZisHoM4+bm#LHNWs|D)++I-|wJD!Ab^9Q_vz%B@^g=iyFa=XF3$r0{ zTZ64R;&zPi3H*i&xQKgr0NXZ{Q#hayTu>TiQ31mchcRvRlmY^CupX({fQ|SSr;&z> zxQwf~jwg7A=lBz^pztWDDykvtv1PcEm2v0nk=;j9K8=>oJ#zNQ*-1xIWa2C%`TfZ9 zxzzh^;gUW(j(BLB57*Y}?_Hv=ExW4=Z!|>!VmrkKsSV95TY;)aTtv;&?6ob z@GYic36^6eR$()Y*o%E_NuM+V=W!92a1GaS6Sv{gj{Y@Dqax~{0UAP&cudC(EXEQf zV;y#2H}>EXUf}~i!jVjuN6*L|MNkeEQ3+X@H!MS%WqLUCaHfRQOoL^bWt7#@%oB4k z**cS^DAXH);kPXHhC@vF$9U^Cpxf&p&jPeD2TN+F4mxN*AFQgS9CpyYKm3K>vZm5X zViJrH#9%OnAr2ET2{SPZb1@Iguo9~v*#Zj|EtP^+?4I?7}`A#z~yV1-w8OUc*uEOD=&cO28B4Q4uvz2X)Z| zEzuf&=!_odg+PR203s2G5s-b4!+1=?Ow7VhNWgM5$-0w%EIo^X@m}lXSh_KpA;D<+ z#qz6lt(;Ts8TJ5rC{a4A#_4BYb%0;pD^FOXQbNze`Bg z&z`a}t82#(mDR=`YoL99g1f*I1+>LS3QNN4l~!_yeh9}<3_~1-V>58?z);WVz{2HxQVbpDpoXu8>!>gLkP zqx)splDwQDVea&C!^ef0Mp|N8OYQLSCp;;Umed*tIo<}yF&lQFap^{p_>vkQ!I*{3 z*n?N7|235@yfGC!@P@W1`!6dyMBv}dXswc5EYGw|cjCG%ZSlsA`95D$YnoIfdnHp- zuJUZFK=lb)&rKz@nEj60jP0>{Q~Ul(y-B?)DbWdj=!Q_l;5*E~O#Fa_Sc%nGgSAM; zR_wz89KvB7!7-eI+L>$#2NXsL=u0xHfJ&&1`e=aWXoGg>f&c`f5Bee;gAk387>!Ao zf?3co2Me$e>#+q}u?PEbsI&65@+*N0xCE-4G&=n0sWOrAO4CHLyDTs*`fMsoSj{rz zylRRTf24@E^;B`K(1 zD|AN)!VrPwSb-#Lf)QJ=4F_--$8i!Dk&ZiffQR@U)u{x$^o(kw8Csw{e9#pE=#3!s zLx0T20xUujl3~PF?8Gh{$0?k~IsAd=$ihoV?URRE#vKJb7?nT^NR_0OJ=?gX=~?1u znf23Sm3B3nXyIoK`WDs-%!jSMLU#;CEWUvr30Q=cScTn?N^URygj9A(Ur|Hg7i>U1 zDm$qFrSfZ!4)8}8bVV=*e%*@uPy&gN+VLD5dT{rKyvTZd^YP8gmf_Ul9jQB3Gc1`u zbJFNZ17#$`K%N@8Y}j+IqONT@*~wGPX5(8u>BaOSHw4ld?@e*QeDv=_4!|1xhS#v^ zOHo4EV7juwTAww=Oz#xry@FYD&3Y##FMho5xofBGN}FH)+`i_ag>UlIVlNER7nE50 zqceJ;H)0TrZ=lBv`~ZpM37kX*uHhjv@doel0Y02a2XsddgrGkLU?4_f4951<(-;ys zfYUgG>v)FOcmtIbu|Yu;LTQwTq*Mq(F$iN3k13djAF&V#Sc2=gfjfADXZWCJ^bvL> zxjh_^8+ni){^*Qu=z|~(hPgtP>UFO*m>tNm%v}HSi=`&sEBzR2wJbBXGN^~Oq7>6170kbd{>9~UHc!b~a4h6|7Mc{!_D2*DZiI!-KcJM(5NEYjh zL5M;$hUgg?V9k4>Q-67f;3Y>YgBp<1a0rj# z5XAifI`!kSAsEx~9hPGSQm`JW*p6E;mnQNTrK&FK2kWVr2{c7B_@Of*5rx5s!z4_` z_n3(UEJ6xWaTB-j41eGa-r+r(hfpCsd;IDq15aEJnTA)}UtNBcx-y~k${CDT&OoYZ zkSX&Mluv(J;;ok2ts6zPMi~iyHOjF|iT~D6t_t#m5se5%d5d=#K7bBB;s#P6BPo!G z#4pHzGKeC8s<<&oOM6pHyZ**0TSuPHta|B@1FxIUI~CpZDL%AKpUr4ZuNBcHQRx+v z`X{&c;GQe>kDJY|7HhQVYcYCfNr4vV2tNcN7}1EqHyDSBIDmsVjWf7_OSlXtPB$Nl z;tP18HtNC;Q5cG0*aAtS{h?gqg9OgtEUw`?9^(z(;v;nZ$=Rrn2519c1fV;5AP&Rv z4dO8l6EG2buoqu&JxZZGYM@qIMz!(jb&UBX%`xkQmo~;^^9zZk$qd;)n6_YU?-O~! zqj}wEqWyfUmp1+u?`N9HF6*KhTEYju_!3_u7-0xUB-SGpo3I!AaTLdJ4!_|VZsIoX zqkK4>K~zCq)JJQy(KGUeAN&!3g-E~>Bq13)u?xp>0+(t@0sR_ANl3;zNC`02N#<%ON4=DzlFAX3x{8&o)tAv+d8OpY*VI;I;Oxpu z9{<#Ibhp${=6BcnTOr!1J4N+MOF8_0oW>cP#~b7=ujAAevV=)u6kbrktGCaPMaVF#O;r%-{u3oZwqhZE` zkrN_JqdqexFvz*RbZ)8jeNb3C`@|z3Vas`%UePbVeL?@%)X07v=IrT4)5;rQre$vs zJ!{m;)L?H%4F$@zh3D$G`DVoY=6${p29nQdd;z^d1y}~pD_wfLBoUA?aqX5c5 zvZMJmyfG_1Ig#PhOZj=}v!}~2F@9qF7|S5(#6=kE>sZzl*yk9g**^#`WWKODE~cVI zKB%ijJ#dr@tu230Q2*H~*0=Xw5(&8y6%YWqA}wO6Y0wFN=!yV*jUEU?I3h6!gAt42 z7=fwy7T;k879v5#W}&X5IZC4%c2k{O#cOR2i0RPo?QAtQ~z)TkD@WrY|K! z%8y(4vtCh3L&?Q2<35j821mP!N+Y?WMF8~p8Edf}>7$6%XrB4O6&_<~_7FBkzJ}nr z%fgrCXrrC-?XngTnP$ls4}22ArxKJEZV-xQefINbGuB;bNv1Ey3YuTJ*!G{K^?dxj z-bK>H9Udquu|*ZMMSFC>m*|cGh{Ont#1u@!bj*bTOR)^Akc73^itRXv!#IZHxIBV# zbcKK<(;xT<9m!&cim)bK5@AWQZIEQUOtSqo>B^9N<Mc*77;iWJxtj$?}NeISP_i{K;%>|C5H=&rf*VSX*}960PBb4)8-f#$gg> zV-8ke71kmd+p!b7a0nN06L)YIzr&VmZwCiB!Wo6(jv{(Sk~ylQ5t^U{`XdbC$i#cN zjwLnl6Oy5PL&_pA%nw+PrSHu$4|lSR+}mU&n`ZB1tzN!J27~sUX_!j1inxXk9DPlv zXw9>nwF1vO=KnmA6s`O7*?Psx8j0aVU>*lG;A4)1H{;;rF#*evifgbZ8{~o;3PZZ< zA&@>@2C~}+xkR63^{2AL{KtAZ=Kg7Bmvs}F{-4cwn)dn+yVEwmESK-|D4NP~f^BYX z)}K+@kY{}3z#~+tP!w0WP)?|Z>S&Cn@Ifc|qcdVK7yi@bf81flJeFYM!nrccnr2E|tx(o6tz(vlmXXDyw>pwNu0XQL zH9SNn^2QS@6h(1VKowL)H8g}TI-(~6(FY+If^RSplQ0?6F$=SyVIfx3VYCKGNX8ay z#}4eoKKzO!_zkylCw{{(uR7`4NQAFKB3**zy&(~hgUJD8AJ0&99M>2Fu>zZ5#6cVy zr!{$6SL^t+Je;)0+}r(~j!!-KWY|H=_pGlr?`?$MR&tqhxo$jbxWiHI;vSyhDgMAq z{E3fHI9gs5hC7PD0}{L9sEA6ai&kijHfRe!_@fKHL^%3IFd6_ktr3`p>G%#mVkwqk zIaVSGYq0?vA<3{Ak`&vq1N(6Rk~EjcZ8-m~l1_h_@IBne13X5-@jQNlGhE<`!f=NN zilR75z!RlV24zthRZtbx;f1=Whx%v$Z!|>L@k&=EfIu{2Fa$&KJ!WDRRwD_?NP!Vs zkcKn3f(%^4eLNVio%!&%;BNN{bR%uJ`KQE%GpC*Y=%qiz+2uSlH#U$nD*`#QVvsW{ z2|2UUkTa9BsRlVCiTxT#q}IV2sjGzlLnX|8yZP^TYe1&|$1`(3=!)om*LF-RXC2Fu zqMse*OwQwBh32y5J}@sUG+zB^+zd!6lRJA3{OguSued0lmTbJ#HOimtVz1B)H_rx6autygrO zI$bm4W%Z9Yblr8)#_l(D3!Oau=puOVgi6QNl79*2p)|}9j>~Ou zd8(^lrvpF#J3CmOQv;RKXVJ(o?y0Vx>EAcVSM~DAxqN&*y(Vc~hwSgook}Cpz6sgA zIa-qa+fswI=NSthCdgZSd8sUKE9E7cyx);`74m>x9_iZjH9zW;=Q8p*K<-23E=u~* z(mRxPn}(?nmA%wNQfTFxuoFYUm1=n>cB`;kr3(TKW1r~?JM|*i8-38%u;iJps5}!< zqlt=L~{_<@vBXhe9) zNmfD-!ofZiQbZXBQbi$Er28rDh{CRviN;xf=q~8;O(#j0BL#kAjBzh?O?1uM=**Wq zglRk`VllQtF8O{O!mqf2_t2?SZ>Wn#hO8{z3I|hWs^Vt&`K7L`!&uf)s<;_XzSQNi zwQIy$_J;g#Def=c=xo)R_rKsCv@%`6DzqnLlQj*^_L4BR-FXtjV?%j*wU(0#C)NGO z7%IKjwbAb`Mzv51YW+5tF_A&Rp-Q~r&3j!V zyS)71VI1*6mtUuEUz9ovfrv&7CgT?F;{l%GIVbiW-HOvwz+l895!-ME*I-wYjuu|w zE!;fGCUv9L7=PDMKv)Zv^67Y{O1GN7=IEGEBin+`|jZ zreH5Z$?_Clc%ut?BMy_0fECz=gUBea=PU^*6-aKlq7Fu23$`H>uP~`1&n}P!T_qYv zG(m4n$1ymPW%8j2Izo?K)HWw@84r*J+iEnl2-7oKiEX%tXUJWhEDQOEDNm8=MOH^8 z3TREtAWvynhP60}i|AL2N&vdrvSOVVO5 zP9p=4khdNg8?7)EN8nhW&JG5^lPu?j#_&aVgkcJ{;TX;%H?>S71bTD*XA&sYkWzs$ z7!M6UVM`;Pq2V#IP^B^18tveR9gvT)FXA2?sK5)M0)`-6w|N-tD5S~ zUo!7wCJmQx4Y%RajHH7edvFOK;n(zQr8O!vd^8Dz;%4 z_TiYG(Mepu3)F2zra~Y>F&@*f3hPj(HOY$+n2L3fFL96KGVUS^?_tx1dLAv&4jti# zuGrX??Vvx+NWRq6wWF(m8JLM=Y{dZ_g8U2UQ?O}IGNS>Sqc6fS2MgfgLwQGAw1XbA zF&|5@9eZ&Yc{*_YJ9VG~jHTEH`6}=>KBBQNA4fnMVELr2KNdi~Ry&Pzcnx@&;-E zl?V!=5K5yOT*fVw?@5V4Gx(u1A~6_onAnTP3thAY0nU`)bftU?ObBNdx)8~0J6FO?Yl5rCicj22=El8}KL zc!&?M590n4Wl$c0=#3;KV@y9P8XOKLqrxqO;s-A@2LEnJ8H70ef}PlnBRB@Vyj;z| zUEIe*{Ein;LWuwzaTMoq8-L&hUgJIT^e0(S0W}bV!5EFPn2A|Pz+$Y$CS2;z^}j*j z72e`KY{O_sPz3>ymzw<$ilKu4${4Ag?5ncS~s*9z_mjF0uhEN#9}n2;s-3m7PKBnt%??rbaLr!U>#0%P5v(U^L6I5k+HYc+de~VmjtRUZrhC<-t^7@Q3xqO&`L+ z7>H=-5s#_(PUdGbnuo<$idB$K?Ivu;=2)6pTt+(H!gUB460PBbahQZ%IE1_S9qvP^ z7a$$vt=NV8$i#baH=tMShtW!*94ev`yf7CABx5~3LKnvY;g8N3hw+$zrC5g5SdVQu zisQ(@Rb0m%JjS1RAIJ5#9Zp7oJ#xVnp}2x;c!)>HJA%A{3aE-|sE&r{gAfeCH<%20 z1EOIe#ZeNT2tYJuqSh)#DKKK>X!Bc&jZ9DAB?^wAOv48q!EJ`&o4jga!->4A zyCFG`8sKQBI4H$nYZ#DEEozvNSIs5A`Wv3OsxC%my>s&DS7)@WevsP6G5KQ!WGA^pi!&8b^j(Ccbr?j?Eqm^(8s zJDU3rtNhJfg(;ms?;=Roz@ZBj9ptOmn_bN*5^EhHH^akWE&3lUMZReqc?DA3a~5?e=Bcn2ZEGq1YY8q+ z;iBZ~l|TYgR3|}-=xj(4H5EmsPa*FdttHW)64eFP61beOlt63AJ3#nnh~f8A>gK;J zJoRbbZC({MuOVrW>S)|uMs={U{L;LydeRaM>Yp8Cr`Dx^yMo*1D(V62ZVE=KUWQ^V zvm?O#-A~8<=Y6@?R@*t+EB;hgJd!m;)K)dirn)-Wdm-p$$f&Q@Hu%?7$A8*&WkX^; z)y|Nwy6T?G^hj5Uu3+fgLY-$><)0(=Y3tgCcMU$@Z-HR7f#F@?=L_Xv^FoLPYZsZ< zM~(P*F|l5Se?GS9syQ1TexVjLbZe@5{P&l(lEJ-&TG{egx_Q6stntss&(09}4Cj5- ze4AUVwbcJU4w4%jZ49R?b1_cUP#0O!IvX|zaC+G}zqny@ z9Ts|)QSA->rPTU{reBi#cehpDEeHJ{WE)H3Px~t8j{mnss+r+l9o5y)sjcc@_@Rdy z`=8GFQ*Qe_ueumE*WiRsH&UAzI(n-$a^|W3Z7%$e>H6PgmjAe0xm>wy{=1B5EHp^% zaO`Ge^rN^1NRD zTJp{!igy*!yu%1mh8Vw%S3Brx#jYu}vb<+{|AGqLJ*7Ua*%f*(&Po&JY!#aV8UM00 z!{{(x?W40lPZNB8r2Hp$hBXt^dAi)j<`dQ3IxW$*#OBHBFrBWRA#RFV-X`Q-Cqv>C z^^4*G`P<8XIcUQkogq^>o=mTV8Lv)JOXM#khm!?zc$uCbY0PI(dl$-kg&Fx#{>Mtg zh}EiR-h0g5w=6L(Tdnrh8PwW|F4KW48zu{dfin+78Cmi9Axtb!>D8yZ8yA0R!8Yt8iuW7u7e?Kof_RX zK4zooKU4hcf2zoKN;)rSPAh3lPbw{x=E@P}0IzD=D!$5D=FTa#mBaj6OS!6aHYBB} z4V*sPnekbQ8fsUjb?aI+YPW3NvTALw)?QU>*KS_7YW=!3+f=RPRjYQr=Ji_EY1O8I LanvStviko3r1G)9 diff --git a/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md b/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md index 5c8cf990..12da958f 100644 --- a/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md +++ b/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md @@ -10,15 +10,4 @@ XML-based formats such as OfficeOpen XML, Excel2003 XML, OASIS and Gnumeric are - Command Execution (depending on the installed PHP wrappers) -To prevent this, PHPExcel sets the LIBXML_DTDLOAD and LIBXML_DTDATTR settings for the XML Readers by default. - - -Should you ever need to change these settings, the following method is available through the PHPExcel_Settings: - -``` -PHPExcel_Settings::setLibXmlLoaderOptions(); -``` - -Allowing you to specify the XML loader settings that those that you want to use instead. - - > While PHPExcel protects you with its default settings, if you do change these settings yourself, then you're responsible for ensuring that your XML-based formats aren't open to XXE injection. +To prevent this, PHPExcel sets `libxml_disable_entity_loader` to `true` for the XML-based Readers by default. \ No newline at end of file