zendframework/zf2 — pull request #2075 by padraic (2012-08-01 19:22:41+00:00)
Title: Disable external entity loading in Zend\Feed\Reader

Refer to emailed report. Disabled for all DOMDocument instances used in Zend\Feed\Reader. Not required for Zend\Feed\Writer as those instances are not used for XML parsing of remote sources.