1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
--TEST--
XSLTProcessor::$maxTemplateDepth modification validation bypass
--EXTENSIONS--
xsl
--FILE--
<?php
$proc = new XSLTProcessor();
foreach ([1,-1] as $value) {
echo "--- Set to $value ---\n";
try {
$proc->maxTemplateDepth = $value;
} catch (ValueError $e) {
echo $e->getMessage(), "\n";
}
}
echo "--- Get reference ---\n";
try {
$ref =& $proc->maxTemplateDepth;
} catch (Error $e) {
echo $e->getMessage(), "\n";
}
echo "--- Unset ---\n";
try {
unset($proc->maxTemplateDepth);
} catch (Error $e) {
echo $e->getMessage(), "\n";
}
echo "--- Dump ---\n";
var_dump($proc);
?>
--EXPECT--
--- Set to 1 ---
--- Set to -1 ---
XSLTProcessor::$maxTemplateDepth must be greater than or equal to 0
--- Get reference ---
Indirect modification of XSLTProcessor::$maxTemplateDepth is not allowed
--- Unset ---
Cannot unset XSLTProcessor::$maxTemplateDepth
--- Dump ---
object(XSLTProcessor)#1 (4) {
["doXInclude"]=>
bool(false)
["cloneDocument"]=>
bool(false)
["maxTemplateDepth"]=>
int(1)
["maxTemplateVars"]=>
int(15000)
}
|
