From a28dd4cf62679a29bbb73cfeeb3faa4162418c61 Mon Sep 17 00:00:00 2001 From: Hiren-Z <47991695+Hiren-Z@users.noreply.github.com> Date: Fri, 19 Jun 2026 02:57:19 -0500 Subject: [PATCH] fix: adjust snuffleupagus for user_saml --- rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules | 1 + 1 file changed, 1 insertion(+) diff --git a/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules b/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules index affaa9b..8a73c1d 100644 --- a/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules +++ b/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules @@ -52,6 +52,7 @@ sp.disable_function.function("exec").param("command").value("apachectl -M | grep # Nextcloud inherently enables XXE-Protection since 27.0.1, therefore, drop setting a new external entity loader sp.disable_function.function("libxml_set_external_entity_loader").filename("/nextcloud/lib/base.php").allow(); +sp.disable_function.function("libxml_set_external_entity_loader").filename("/nextcloud/apps2/user_saml/lib/Helper/TXmlHelper.php").allow(); sp.disable_function.function("libxml_set_external_entity_loader").drop(); # Harden the `chmod` function (0777 (oct = 511, 0666 = 438)