Re: Re: Orbeon Nightly regression: DTD entity imports no longer working
Posted by
Ralf Jung on
Dec 14, 2010; 9:34am
URL: https://discuss.orbeon.com/Orbeon-Nightly-regression-DTD-entity-imports-no-longer-working-tp3085139p3086698.html
Hi,
> We just disabled loading of external entities for security reasons.
Ouch :( Where is there a security issue here? The DTD itself is also loaded
from the file system, triggered by the XML file.
> I guess that means we should provide an option to the URL generator
> instead. The only problem is that the XML parser configuration is
> really nasty (JAXP is a horrible thing).
>
> Do you have a workaround for this?
Not really - this is already the workaround for eXist being unable to properly
deal with entities ;-)
Kind regards,
Ralf Jung
--
You receive this message as a subscriber of the
[hidden email] mailing list.
To unsubscribe: mailto:
[hidden email]
For general help: mailto:
[hidden email]?subject=help
OW2 mailing lists service home page:
http://www.ow2.org/wws