case-insensitive charset name in xml scanner

PHPOffice · Jul 3, 2019 · d4eab49 · d4eab49
1 parent 6ab969e
commit d4eab49
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/PhpSpreadsheet/Reader/Security/XmlScanner.php b/src/PhpSpreadsheet/Reader/Security/XmlScanner.php
@@ -100,7 +100,7 @@ private function toUtf8($xml)
             $xml = mb_convert_encoding($xml, 'UTF-8', $charset);
 
             $result = preg_match($pattern, $xml, $matches);
-            $charset = $result ? $matches[1] : 'UTF-8';
+            $charset = strtoupper($result ? $matches[1] : 'UTF-8');
             if ($charset !== 'UTF-8') {
                 throw new Reader\Exception('Suspicious Double-encoded XML, spreadsheet file load() aborted to prevent XXE/XEE attacks');
             }