Login  Register

Re: Re: Orbeon Nightly regression: DTD entity imports no longer working

Posted by Ralf Jung on Dec 14, 2010; 9:34am
URL: https://discuss.orbeon.com/Orbeon-Nightly-regression-DTD-entity-imports-no-longer-working-tp3085139p3086698.html

Hi,

> We just disabled loading of external entities for security reasons.
Ouch :( Where is there a security issue here? The DTD itself is also loaded
from the file system, triggered by the XML file.

> I guess that means we should provide an option to the URL generator
> instead. The only problem is that the XML parser configuration is
> really nasty (JAXP is a horrible thing).
>
> Do you have a workaround for this?
Not really - this is already the workaround for eXist being unable to properly
deal with entities ;-)

Kind regards,
Ralf Jung


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws