[XSL-LIST Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

javax.xml.transform: prohibiting Java extensions

Subject: javax.xml.transform: prohibiting Java extensions
From: "Julian Reschke" <julian.reschke@xxxxxx>
Date: Fri, 25 May 2001 14:15:52 +0200
transform for java client
Hi,

I am considering to use XPath as a query language within a WebDAV DASL
grammar. This means client software can submit a query where the condition
is expressed as XPath expression applied to the WebDAV properties of the
resource(s).

As WebDAV properties can be in "any" namespace, I need to allow binding of
namespace names to prefixes, so that the prefixes can be used in the XPath
expression.

However, most Java-based XSLT engines allow to create Java objects (and call
their methods) by specifying a special namespace, which currently is
proprietary. This means that blindly executing the query after binding the
namespace prefixes, a client can get access to all objects in the system.

Obviously, one needs a way to prohibit execution of extension functions...
Is there a portable way to to it? If not, how could I achieve this with
Xalan?

Julian


 XSL-List info and archive:  http://www.mulberrytech.com/xsl/xsl-list


Current Thread

PURCHASE STYLUS STUDIO ONLINE TODAY!

Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!

Buy Stylus Studio Now

Download The World's Best XML IDE!

Accelerate XML development with our award-winning XML IDE - Download a free trial today!

Don't miss another message! Subscribe to this list today.
Email
First Name
Last Name
Company
Subscribe in XML format
RSS 2.0
Atom 0.3
Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member
Stylus Studio® and DataDirect XQuery ™are products from DataDirect Technologies, is a registered trademark of Progress Software Corporation, in the U.S. and other countries. © 2004-2013 All Rights Reserved.