From 3ef8a0ae1228f717fa1af6e592a69017e0c95a58 Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Mon, 23 Dec 2019 11:23:53 -0700
Subject: [PATCH] Update v_xml_cdr_import.php

---
 app/xml_cdr/v_xml_cdr_import.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/app/xml_cdr/v_xml_cdr_import.php b/app/xml_cdr/v_xml_cdr_import.php
index e8a844d7ec..25f8097f98 100644
--- a/app/xml_cdr/v_xml_cdr_import.php
+++ b/app/xml_cdr/v_xml_cdr_import.php
@@ -564,7 +564,11 @@
 
 				//parse the xml to get the call detail record info
 					try {
-						$conf_xml = simplexml_load_string($conf_xml_string);
+						//disable xml entities
+						libxml_disable_entity_loader(true);
+
+						//load the string into an xml object
+						$conf_xml = simplexml_load_string($conf_xml_string, 'SimpleXMLElement', LIBXML_NOCDATA);	
 					}
 					catch(Exception $e) {
 						echo $e->getMessage();