[
https://issues.apache.org/jira/browse/JENA-651?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy Seaborne updated JENA-651:
-------------------------------
Description:
This may not be a bug per se because I may be misinterpreting how base URIs are
supposed to work i.e., whether it is a security concern or not. Consider the
following query at http://sparql.org/query.html :
{noformat}
PREFIX : <>
CONSTRUCT { <> :bar :baz }
WHERE { ?s ?p ?o }
{noformat}
Result:{noformat}
@prefix dc: <http://purl.org/dc/elements/1.1/> .
@prefix : <file:///usr/home/andy/SPARQLer/> .
@prefix ns: <http://example.org/ns#> .
@prefix vcard: <http://www.w3.org/2001/vcard-rdf/3.0#> .
: :bar :baz .
{noformat}
Note the URI for :
was:
This may not be a bug per se because I may be misinterpreting how base URIs are
supposed to work i.e., whether it is a security concern or not. Consider the
following query at http://sparql.org/query.html :
PREFIX : <>
CONSTRUCT { <> :bar :baz }
WHERE { ?s ?p ?o }
Result:
@prefix dc: <http://purl.org/dc/elements/1.1/> .
@prefix : <file:///usr/home/andy/SPARQLer/> .
@prefix ns: <http://example.org/ns#> .
@prefix vcard: <http://www.w3.org/2001/vcard-rdf/3.0#> .
: :bar :baz .
Note the URI for :
> Base document URI reveals system path
> --------------------------------------
>
> Key: JENA-651
> URL: https://issues.apache.org/jira/browse/JENA-651
> Project: Apache Jena
> Issue Type: Improvement
> Components: Jena
> Affects Versions: Jena 2.11.2
> Reporter: Sarven Capadisli
>
> This may not be a bug per se because I may be misinterpreting how base URIs
> are supposed to work i.e., whether it is a security concern or not. Consider
> the following query at http://sparql.org/query.html :
> {noformat}
> PREFIX : <>
> CONSTRUCT { <> :bar :baz }
> WHERE { ?s ?p ?o }
> {noformat}
> Result:{noformat}
> @prefix dc: <http://purl.org/dc/elements/1.1/> .
> @prefix : <file:///usr/home/andy/SPARQLer/> .
> @prefix ns: <http://example.org/ns#> .
> @prefix vcard: <http://www.w3.org/2001/vcard-rdf/3.0#> .
> : :bar :baz .
> {noformat}
> Note the URI for :
--
This message was sent by Atlassian JIRA
(v6.2#6252)
