Enrique, > Usually base validations validate against xsd > in url are considered not safe. > how does this apply to the proposed solution ?
Il giorno gio 17 apr 2025 alle ore 13:15 Enrique Gonzalez Martinez < elguard...@gmail.com> ha scritto: > We use that for validations. Usually base validations validate against xsd > in url are considered not safe. > > El jue, 17 abr 2025, 4:37, Toshiya Kobayashi <toshiyakobaya...@gmail.com> > escribió: > > > Thank you, Gabriele! > > > > BPMN experts, can BPMN xsd files be handled in the same way as DMN? > > > > Toshiya > > > > > > On Thu, Apr 17, 2025 at 1:27 AM Tiago Bento <tiagobe...@apache.org> > wrote: > > > > > Thanks Toshiya for bringing this up and Gabriele for starting to > address > > > it. > > > > > > I'll wait until the XSDs are all available inside 1st party JARs so > > > that I can update `kie-tools` to consume the XSDs from these JARs > > > instead of versioning copies of the XSDs directly in the source code. > > > > > > Regards, > > > > > > Tiago Bento > > > > > > On Wed, Apr 16, 2025 at 9:12 AM Gabriele Cardosi > > > <gabriele.card...@gmail.com> wrote: > > > > > > > > Hi Toshiya, > > > > FYI: > > > > https://github.com/apache/incubator-kie-drools/pull/6311 > > > > > > > > Il giorno mer 16 apr 2025 alle ore 11:29 Toshiya Kobayashi < > > > > toshiyakobaya...@gmail.com> ha scritto: > > > > > > > > > Thank you, Gabriele! > > > > > > > > > > > > > > > On Wed, Apr 16, 2025 at 4:44 PM Gabriele Cardosi < > > > > > gabriele.card...@gmail.com> > > > > > wrote: > > > > > > > > > > > Hi Toshiya, > > > > > > regarding DMN, those xsd are used at both test time and runtime. > > > > > > SInce those are used in multiple places, we have to reduce the > > times > > > they > > > > > > get downloaded. > > > > > > I'll try to experiment the creation and consumption of a module > > that: > > > > > > > > > > > > 1. download them at compile time > > > > > > 2. package them in final artifact > > > > > > > > > > > > Then, those files won't be in the codebase, but only on the > > generated > > > > > > artifact. > > > > > > Other modules should depend on the above, and read xsd from it. > > > > > > > > > > > > We have done a similar approach with kie-dmn-test-resources, but > I > > > need > > > > > > some time to experiment how to download files at compile time - > > > hoping to > > > > > > find a clean solution. > > > > > > > > > > > > Best > > > > > > > > > > > > Gabriele > > > > > > > > > > > > Il giorno mer 16 apr 2025 alle ore 05:09 Toshiya Kobayashi < > > > > > > toshiyakobaya...@gmail.com> ha scritto: > > > > > > > > > > > > > Hi all, > > > > > > > > > > > > > > We have a pending license issue with DMN and BPMN. To be > > specific, > > > we > > > > > > need > > > > > > > to confirm the license applied to DMN/BPMN xsd files. > > > > > > > > > > > > > > https://issues.apache.org/jira/browse/LEGAL-690 > > > > > > > > > > > > > > I sent forms/emails to i...@omg.org , > > > > > > > https://www.omg.org/spec/contact?i=DMN/1.5 and > > > > > > > https://www.omg.org/spec/contact?i=BPMN/2.0 , but I haven't > got > > > any > > > > > > reply. > > > > > > > > > > > > > > Tibor shared his thought, > > > > > > > > > > > > > > > I can ask in OMG, however maybe a better solution would be to > > not > > > > > have > > > > > > > those files in the code. The xsds are publicly available, so I > > > guess if > > > > > > > e.g. a test needs those, it should be able to download it. > > > > > > > > > > > > > > Can DMN and BPMN experts check if it's feasible (= remove xsd > > files > > > > > from > > > > > > > code base)? > > > > > > > > > > > > > > The files are listed in the GH issue. > > > > > > > > > > > > > > https://github.com/apache/incubator-kie-issues/issues/1926 > > > > > > > > > > > > > > Thanks! > > > > > > > Toshiya > > > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: dev-unsubscr...@kie.apache.org > > > For additional commands, e-mail: dev-h...@kie.apache.org > > > > > > > > >
