[XSL-LIST Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Breaking paragraphs one linebreaks

Subject: Re: Breaking paragraphs one linebreaks
From: "Michael Kay mike@xxxxxxxxxxxx" <xsl-list-service@xxxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 14 May 2019 06:50:49 -0000
Re:  Breaking paragraphs one linebreaks
To explain why this is happening: if you're running a site like xsltfiddle
that can execute arbitrary user-submitted XSLT code on your server, then (a)
you need to disable calls on Java extension functions, because otherwise the
XSLT code could cause havoc by displaying arbitrary system files on the server
(or modifying them), and (b) you need to disable xsl;result-document because
that can write (or overwrite) arbitrary files on the server. Saxon puts both
these controls under a single configuration option, which xsltfiddle has
(rightly) set.

For the record, you should also supply a URIResolver, CollectionResolver, and
UnparsedTextResolver that prevent access to local filestore.

Michael Kay

> On 14 May 2019, at 06:17, Martin Honnen martin.honnen@xxxxxx
<xsl-list-service@xxxxxxxxxxxxxxxxxxxxxx> wrote:
> Am 14.05.2019 um 02:47 schrieb Manuel Souto Pico terminolator@xxxxxxxxx:
>> I get: Stylesheet compilation failed with 1 error(s):
>> Error 1 at line 27:48 : xsl:result-document is disabled when extension
>> functions are disabled
>> https://xsltfiddle.liberty-development.net/ej9EGcD/10
> That is a limitation of the tool, not a limitation of Terry's code, if
> you change the one template he had using "xsl:result-document" to
>     <xsl:template match="/">
>             <xsl:apply-templates/>
>     </xsl:template>
> you should get it work with xsltfiddle.

Current Thread


Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!

Buy Stylus Studio Now

Download The World's Best XML IDE!

Accelerate XML development with our award-winning XML IDE - Download a free trial today!

Don't miss another message! Subscribe to this list today.
First Name
Last Name
Subscribe in XML format
RSS 2.0
Atom 0.3
Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member
Stylus Studio® and DataDirect XQuery ™are products from DataDirect Technologies, is a registered trademark of Progress Software Corporation, in the U.S. and other countries. © 2004-2013 All Rights Reserved.