Hopefully final tweak for XXE to prevent displaying errors if SimpleXML isn't available

Author: Mark Baker

Classes/PHPExcel/Settings.php

@@ -378,10 +378,10 @@ public static function setLibXmlLoaderOptions($options = null)
      */
     public static function getLibXmlLoaderOptions()
     {
-        libxml_disable_entity_loader(true);
         if (is_null(self::$_libXmlLoaderOptions)) {
             self::setLibXmlLoaderOptions(LIBXML_DTDLOAD | LIBXML_DTDATTR);
         }
+        @libxml_disable_entity_loader($options == (LIBXML_DTDLOAD | LIBXML_DTDATTR));
         return self::$_libXmlLoaderOptions;
     } // function getLibXmlLoaderOptions
 }