patched https://github.com/openid/php-openid/commit/625c16bb28bb120d262b3f19f89c2c06cb9b0da9 changes (CVE-2013-4701) to bundled PHP OpenID Library (OPSA-2013-003) (refs #3384)
disable XML external entities in loading arbitrary XMLs (OPSA-2013-003) (refs #3384)
added test for opToolkit::loadXmlString() (OPSA-2013-003) (refs #3384)
raised supported PHP version to 5.2.11 since libxml_disable_entity_loader() is availble in PHP 5.2.11+ so we cannot support earlier versions of PHP anymore (OPSA-2013-003) (refs #3384)
changed opToolkit::loadXmlString() to decrease code duplications and to follow a part of PSR-2 (4.5. abstract, final, and static) (OPSA-2013-003) (refs #3384)