javax.xml.transform: prohibiting Java extensions
Hi, I am considering to use XPath as a query language within a WebDAV DASL grammar. This means client software can submit a query where the condition is expressed as XPath expression applied to the WebDAV properties of the resource(s). As WebDAV properties can be in "any" namespace, I need to allow binding of namespace names to prefixes, so that the prefixes can be used in the XPath expression. However, most Java-based XSLT engines allow to create Java objects (and call their methods) by specifying a special namespace, which currently is proprietary. This means that blindly executing the query after binding the namespace prefixes, a client can get access to all objects in the system. Obviously, one needs a way to prohibit execution of extension functions... Is there a portable way to to it? If not, how could I achieve this with Xalan? Julian XSL-List info and archive: http://www.mulberrytech.com/xsl/xsl-list
PURCHASE STYLUS STUDIO ONLINE TODAY!
Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!
Download The World's Best XML IDE!
Accelerate XML development with our award-winning XML IDE - Download a free trial today!
Subscribe in XML format