PHPOffice/PHPExcel — pull request #405 by ymaerschalck (2014-07-16 07:30:48+00:00)
Title: XML External Entity (XXE) Processing

https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing

change simplexml_load_file to
simplexml_load_string(file_get_contents()) because load_file doesn't
work when
http://php.net/manual/en/function.libxml-disable-entity-loader.php is
true