3v4l.org

run code in 300+ PHP versions simultaneously
<?php $xml = '<!DOCTYPE foo [ <!ELEMENT foo ANY > <!ENTITY xxe SYSTEM "file:///etc/passwd" >]><foo>&xxe;</foo>'; $doc = new DOMDocument; $doc->loadHTML($xml, LIBXML_NOENT); echo $doc->saveXML();
Output for 5.4.0 - 5.4.45, 5.5.0 - 5.5.38, 5.6.0 - 5.6.40, 7.0.0 - 7.0.33, 7.1.0 - 7.1.33, 7.2.0 - 7.2.34, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30, 8.1.0 - 8.1.27, 8.2.0 - 8.2.17, 8.3.0 - 8.3.4
Warning: DOMDocument::loadHTML(): DOCTYPE improperly terminated in Entity, line: 1 in /in/vSXdt on line 8 Warning: DOMDocument::loadHTML(): htmlParseStartTag: invalid element name in Entity, line: 2 in /in/vSXdt on line 8 Warning: DOMDocument::loadHTML(): htmlParseStartTag: invalid element name in Entity, line: 3 in /in/vSXdt on line 8 Warning: DOMDocument::loadHTML(): Tag foo invalid in Entity, line: 3 in /in/vSXdt on line 8 <?xml version="1.0" standalone="yes"?> <!DOCTYPE foo> <html><body><p>]&gt;<foo>&amp;xxe;</foo></p></body></html>

preferences:
218.52 ms | 405 KiB | 379 Q